Debian Security Advisory DSA 1733-1 (vim)

The remote host is missing an update to vim announced via advisory DSA 1733-1. OpenVAS Vulnerability Test $Id: deb17331.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1733-1 vim Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1733-1 : vim - several vulnerabilities

Several vulnerabilities have been found in vim, an enhanced vi editor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2712 Jan Minar discovered that vim did not properly sanitise inputs before invoking the execute or system functions inside vim...

vim: command execution via scripts not sanitizing inputs to execute and system

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using 1 filetype.vim, 3 xpm.vim, 4 gzipvim, and 5 netrw. NOTE: the...

vim: command execution via scripts not sanitizing inputs to execute and system

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using 1 filetype.vim, 3 xpm.vim, 4 gzipvim, and 5 netrw. NOTE: the...

CVE-2008-2712

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using 1 filetype.vim, 3 xpm.vim, 4 gzipvim, and 5 netrw. NOTE: the...

IE ADODB.Connection对象Execute函数内存破坏漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 IE中ADODB.Connection ActiveX对象的Execute函数存在内存破坏漏洞，允许远程攻击者通过诱骗用户访问恶意WEB页面或HTML文档导致浏览器崩溃或执行任意代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 在Internet Explorer中禁用ADODB.Connection ActiveX控件。为以下CLSID设置kill bit：...

Microsoft Internet Explorer - ADODB Execute Denial of Service (PoC)

Microsoft Internet Explorer - ADODB Execute Denial of Service PoC ADODB.Connection.Execute CRASH TEST function BangBang var a = new ActiveXObject'ADODB.Connection.2.7'; var b = 'FUCK'; while b.length WOW!!! Are U live? milw0rm.com 2006-10-24...

CVE-2006-3762

The CVE-2006-3762 entry concerns the Touch Control ActiveX control 2.0.0.55. A remote attacker can read, and possibly execute, arbitrary files by supplying a file:/// URI in the sPath parameter to the Execute function. This indicates a failure in input handling for file paths within the ActiveX c...