7707 matches found
security flaw
traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service oops and stack fault exception...
Apple Safari 1.3 Web Browser - JavaScript Invalid Address Denial of Service
Apple Safari 1.3 Web Browser - JavaScript Invalid Address Denial of Service source: https://www.securityfocus.com/bid/14528/info Apple Safari Web Browser is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs certain JavaScript operations...
CVE-2005-1767
CVE-2005-1767 affects Linux kernels 2.4.x and 2.6.x; the vulnerability exists in traps.c stack fault handler, allowing a local user to cause a kernel crash (Denial of Service) via stack exceptions. Public advisories (Debian, Red Hat/CentOS, Ubuntu) indicate updated kernel packages mitigate the is...
idm405.txt
/ Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differnt from what was found in application called altnet download...
Internet Download Manager <= 4.05 Input URL Stack Overflow Exploit
No description provided by source. / Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differnt from what was found in...
Internet Download Manager 4.0.5 - Input URL Stack Overflow
/ Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differnt from what was found in application called altnet download...
Internet Download Manager 4.0.5 - Input URL Stack Overflow
Internet Download Manager 4.0.5 - Input URL Stack Overflow / Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differn...
ieCrash-javaprxy.txt
SEC-CONSULT Security Advisory ================================================================================== title: IE6 javaprxy.dll COM instantiation heap corruption vulnerability program: Internet Explorer vulnerable version: 6.0.2900.2180 homepage: www.microsoft.com found: 2005-06-17 by:...
[Full-disclosure] SEC-CONSULT SA-20050629-0
SEC-CONSULT Security Advisory 20050629-0 ================================================================================== title: IE6 javaprxy.dll COM instantiation heap corruption vulnerability program: Internet Explorer vulnerable version: 6.0.2900.2180 homepage: www.microsoft.com found:...
ZH2005-13SA.txt
ZH2005-13SA security advisory: NEXTWEB iSite multiple vulnerabilities Published: 1 June 2005 - GOOD MONTH EVERYBODY ;- Released: 1 June 2005 Name: iSite Affected Versions: ALL Issue: SQL injections, exception handling, unsafe directories Author: Trash-80 - [email protected] Vendor:...
[ZH2005-13SA] NEXTWEB (i)Site website management multiple vulnerabilities
ZH2005-13SA security advisory: NEXTWEB iSite™ multiple vulnerabilities Published: 1 June 2005 - GOOD MONTH EVERYBODY ;- Released: 1 June 2005 Name: iSite™ Affected Versions: ALL Issue: SQL injections, exception handling, unsafe directories Author: Trash-80 - [email protected] Vendor:...
CVE-2005-1743
CVE-2005-1743 affects BEA WebLogic Server/Express versions 8.1 (SP3) and 7.0 (SP5). The root cause: when a security provider throws an exception, WebLogic may use an incorrect thread identity and may fail to audit security exceptions. Implications noted: potential partial impact on confidentialit...
CVE-2005-1743
BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions...
CVE-2005-1330
AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service Cocoa application crash via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception...
CVE-2005-1330
AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service Cocoa application crash via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception...
CrystalFTP Pro 2.8 - Remote Buffer Overflow
/ CrystalFTP Pro v2.8 Buffer Overflow Exploit 04/25/2005 despite the fact that nobody uses CrystalFTP i had to release a new version that replaces the first one. this overwrites the structured exception handler with a "pop edx pop eax ret" in kernel32.dll. this takes us to a pointer of the next...
CrystalFTP Pro 2.8 - Remote Buffer Overflow
CrystalFTP Pro 2.8 - Remote Buffer Overflow / CrystalFTP Pro v2.8 Buffer Overflow Exploit 04/25/2005 despite the fact that nobody uses CrystalFTP i had to release a new version that replaces the first one. this overwrites the structured exception handler with a "pop edx pop eax ret" in...
CVE-2005-1060
Technical details about CVE-2005-1060 are not publicly available in the provided documents. Monitor for updates.
CVE-2004-0963
Buffer overflow in Microsoft Word 2002 10.6612.6714 SP3, and possibly other versions, allows remote attackers to cause a denial of service application exception and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including 1 an offset that triggers an...
War FTP Daemon 1.8 - Remote Denial of Service
War FTP Daemon 1.8 - Remote Denial of Service source: https://www.securityfocus.com/bid/12384/info War FTP Daemon is reported prone to a remote denial of service vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. War FTP Daemon...