CVE-2007-5456

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

Code injection

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7...

Design/Logic Flaw

Unspecified vulnerability in 1 SYS$EI1000.EXE and 2 SYS$EI1000MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service machine crash via an "oversize" packet, which is not properly discarded if "the device has no remaining buffers after receipt of the first buffe...

Xitami 2.5c2 Web Server If-Modified-Since Overflow

This module exploits a stack buffer overflow in the iMatix Corporation Xitami Web Server. If a malicious user sends an If-Modified-Since header containing an overly long string, it may be possible to execute a payload remotely. Due to size constraints, this module uses the Egghunter technique...

Xitami Web Server 2.5 - If-Modified-Since Remote Buffer Overflow

Xitami Web Server 2.5 - If-Modified-Since Remote Buffer Overflow !/usr/bin/python Xitami Web Server 2.5 If-Modified-Since 0day Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Xitami 2.5c2 / XP SP2 Polish Shellcode: Windows Execute Command calc Details:.. Module...

VMware Workstation VMStor-60驱动本地溢出漏洞

BUGTRAQ ID: 25441 VMware Workstation是一款非常流行的虚拟PC机软件。 VMware Workstation的vmstor-60驱动中存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 如果向该驱动发送的IOCTL代码FsSetVoleInformation的子代码FsSetFileInformation设置了很大的缓冲区，但将其最大大小报告为1024字节的话，就可能触发这个溢出，导致以内核权限执行任意指令。 VMWare Workstation 6.0 临时解决方法： 在设备管理器中禁用vstor-ws60驱动。 厂商补丁： VMWare...

CVE-2007-4191

Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...

CVE-2007-3969

Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around."...

Buffer overflow

Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around."...

CVE-2007-3969

Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around."...

CVE-2007-3969

Panda Antivirus contains a buffer overflow in its EXE file parsing engine, exploitable via a specially crafted EXE before 2007-07-20. The root cause is described as an Integer Cast Around, enabling remote code execution with no user interaction. Affected component: Panda Antivirus file parsing/en...

Panda Antivirus EXE File Parsing Overflow

The version of Panda Antivirus installed on the remote host reportedly contains a buffer overflow in its file parsing engine. Using a specially crafted EXE file, a remote attacker may be able to leverage this issue to crash the affected application or to execute arbitrary code. C Tenable Network...

CVE-2007-3815

CVE-2007-3815 affects Poslovni informator Republike Slovenije (PIRS) 2007, via a buffer overflow in pirs32.exe in the GUI, allowing a local user to trigger a denial of service and potentially execute arbitrary code by supplying a long search string. Evidence across multiple sources confirms the c...

CVE-2007-3815

Buffer overflow in pirs32.exe in Poslovni informator Republike Slovenije PIRS 2007 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long search string in certain fields in the GUI. NOTE: this may cross privilege boundaries if PIRS is used...

Code injection

Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that injects JavaScript, a www.google.com search IFRAME, and a META HTTP-EQUIV="refresh" that targets a www.google.com search for a local .exe file, which is displayed in the "results...

Ignite Realtime Openfire未明特权提升漏洞

Ignite Realtime Openfire是一款实时协作服务程序。 Ignite Realtime Openfire存在多个问题，远程攻击者可以利用漏洞提升特权。 漏洞允许恶意用户通过内置的管理控制台上传代码到Openfire而执行任意指令。目前没有详细漏洞细节提供。 Ignite Realtime Openfire 3.3 升级程序： Ignite Realtime Openfire 3.3 Ignite Realtime openfire-3.3.1-1.i386.rpm...

Buffer overflow

Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control OUACTRL.OCX 1.0.1.9 allows remote attackers to cause a denial of service probably winhlp32.exe crash via a long first argument. NOTE: it is not clear whether this issue crosses...

Microsoft Office 2000 (OUACTRL.OCX v. 1.0.1.9) Remote DoS Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/23/b/p/span...

Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote Denial of Service

Microsoft Office 2000 OUACTRL.OCX 1.0.1.9 - Remote Denial of Service 2007/05/23 --------------------------------------------------------------------------------------------------------------------------- Microsoft Office 2000 Controllo UA di Microsoft Office OUACTRL.OCX v. 1.0.1.9 "HelpPopup"...

Ordinary file deception-vulnerability warning-the black bar safety net

Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS bundle file, bundle...