1031 matches found
Microsoft Outlook Express 56 - Spoofable File Extensions
Microsoft Outlook Express 56 - Spoofable File Extensions source: https://www.securityfocus.com/bid/5277/info It is possible for a malicious user, sending email via a mail agent capable of manipulating the MIME headers, to spoof file extensions for users of Outlook Express. For example, an .exe fi...
CVE-2002-0299
CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension such as .BAT, which is executed during a scan...
MSIE may download and run programs automatically - details
This posting briefly describes some technical details of the vulnerability discussed in the Bugtraq messages with the subjects "MSIE may download and run progams automatically" Dec 14 2001 and "File extensions spoofable in MSIE download dialog" Nov 26 2001. The flaw allows a malicious web site to...
Microsoft Internet Explorer download dialog may not display complete filenames
Overview There is a vulnerability in the download dialog box in Internet Explorer versions 5.5 and 6.0. The vulnerability allows an attacker to mislead users, causing them to inadvertently execute arbitrary code on the user's system. Description When downloading files included in web pages, users...
CVE-1999-1440
CVE-1999-1440 affects Win32 ICQ 98a 1.30 and possibly other versions. The vulnerability arises because long filenames are not fully displayed, which could allow an attacker to send an executable file with a long name containing so many spaces that the .exe extension is not visible, potentially mi...
Softek MailMarshal 4 Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass
Softek MailMarshal 4 Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass source: https://www.securityfocus.com/bid/3097/info At least two SMTP gateway products have been identified which contain flaws in the handling of restricted filetypes as attachments. An attacker can insert extraneo...
CVE-2001-1386
WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a link file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension...
~..~!guano
Wednesday, 28 March, 2001 The BAT! .. is a feisty multi-tasking email client that is rapidly gaining popularity and for good reason. Cursory examination of it reveals solid effective security measures on all fronts, including non-browser dependent html viewing with on/off switch, random named fil...
Microsoft IIS 4.05.0 - Malformed File Extension Denial of Service
Microsoft IIS 4.05.0 - Malformed File Extension Denial of Service source: https://www.securityfocus.com/bid/1190/info Sending a specially crafted URL containing malformed file extension information to Microsoft IIS 4.0/5.0 will consume CPU usage until it reaches 100% which will halt the program's...
Microsoft IIS 4.0/5.0 - Malformed File Extension Denial of Service
source: https://www.securityfocus.com/bid/1190/info Sending a specially crafted URL containing malformed file extension information to Microsoft IIS 4.0/5.0 will consume CPU usage until it reaches 100% which will halt the program's services. Restarting the application or waiting until the URL is...