7710 matches found
GeckoActiveXObject exception messages can be used to enumerate installed COM objects — Mozilla
Security researcher Gregory Fleischer reported that the exception messages generated by Mozilla's GeckoActiveXObject differ based on whether or not the requested COM object's ProgID is present in the system registry. A malicious site could use this vulnerability to enumerate a list of COM objects...
Oracle Database Server String Conversion Function Buffer Overflow (CVE-2004-1364)
Oracle's implementation of SQL provides several conversion and transformation functions to help database users work with the various data types. Conversion functions can be executed by all authenticated database users. There exists an input validation vulnerability with Oracle database server...
CVE-2009-3799
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptioncount value that triggers memory corruption, related to "generation of...
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptioncount value that triggers memory corruption, related to "generation of...
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptioncount value that triggers memory corruption, related to "generation of...
Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit
?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...
CA BrightStor Universal Agent Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightSto...
Cross site scripting
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
CVE-2009-4071
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
CVE-2009-4071
CVE-2009-4071 affects the Opera web browser (notably Opera on Linux/Unix paths in the connected records) where, when exception stacktraces are enabled, scripting error messages from a site can be read by a different site, enabling information disclosure and cross-site scripting via unspecified ve...
Buffer overflow
Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...
CVE-2009-4004
Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...
CVE-2009-4004
Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...
Core Security Technologies Advisory 2009.0814
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HP Openview NNM 7.53 Invalid DB Error Code vulnerability 1. Advisory Information Title: HP Openview NNM 7.53 Invalid DB Error Code vulnerability Advisory Id:...
HP Openview NNM 7.53 Invalid DB Error Code Vulnerability
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HP Openview NNM 7.53 Invalid DB Error Code vulnerability 1. Advisory Information Title: HP Openview NNM 7.53 Invalid DB Error Code...
VMware Products Guest Privilege Escalation Vulnerability - Nov09 (Windows)
The host is installed with VMWare products and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtsprivescvulnnov09win.nasl 4906 2017-01-02 13:06:55Z teissa $ VMware Products Guest Privilege Escalation Vulnerability - Nov09 Windows Authors: Sharath S...
Fedora 10 : rt3-3.8.2-11.fc10 (2009-10426)
Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 - Add R: perlData::ICal, R: perlData::ICal::Entry::Event BZ 507965. - Fri Jun 19 2009...
CVE-2009-2267
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and...
Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation
Invalid PF Exception Code in VMware can result in Guest Privilege Escalation ----------------------------------------------------------------------------- In protected mode, cpl is usually equal to the two least significant bits of the cs register. However, there is an exception: in Virtual-8086...