CVE-2003-1356

The CVE-2003-1356 entry concerns HP-UX sort(1) file handling being incorrect, enabling local attackers to gain access or cause DoS. Affected HP-UX versions: 10.01–10.20 and 11.00–11.11. The issue is addressed by HP patches referenced in the connected documents (e.g., HPSBUX00237 SSRT3454; PHCO_25...

CVE-2007-4751

RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files...

WinImage 8.0/8.10 - File Handling Traversal Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/25687/info WinImage is prone to a denial-of-service vulnerability and a directory-traversal vulnerability because the application fails to adequately sanitize user-supplied input. Attackers can exploit these issues to cause a denial of service or to write...

Chupix CMS 0.2.3 - download.php Remote File Disclosure

Chupix CMS 0.2.3 - download.php Remote File Disclosure Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' ", "", $result;...

CVE-2007-4841

Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to execute arbitrary commands via a 1 mailto, 2 nntp, 3 news, or 4 snews URI with invalid "%" encoding, related to improper file type handling on Windows XP with Internet Explorer 7...

Design/Logic Flaw

Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant ...

CVE-2007-3845

Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant ...

Microsoft Excel工作区指定内存破坏漏洞（MS07-036）

BUGTRAQ ID: 24803 CVECAN ID: CVE-2007-3030 Microsoft Excel是Office套件中的电子表格工具。 Excel在处理包含畸形数据的文件时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 Excel在标识工作区指定的开始时没有执行充分的验证，如果用户受骗打开了畸形的Excel文件的话，就可能触发内存破坏，导致执行任意代码。 Microsoft Excel Viewer 2003 Microsoft Excel 2003 SP2 Microsoft Excel 2002 SP3 Microsoft Excel 20...

Microsoft Excel Unspecified Security Vulnerability

Description Microsoft Excel is prone to an unspecified security vulnerability. Very little information is currently available regarding this issue. We will update this BID as more information emerges. Technologies Affected Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 SP3...

Adobe Flash Player 8.0.24 - .SWF File Handling Remote Code Execution

Adobe Flash Player 8.0.24 - .SWF File Handling Remote Code Execution source: https://www.securityfocus.com/bid/24856/info Adobe Flash Player is prone to a remote code-execution vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue by tricking ...

Microsoft Visio文档封装远程代码执行漏洞（MS07-030）

Microsoft Visio是Office套件中用于绘制流程图的软件。 Microsoft Visio解析Visio文件格式中的打包对象的方式存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 攻击者可能通过创建恶意Visio（.VSD、.VSS或.VST）文件诱使用户打开处理来利用此漏洞，如果用户访问恶意网站或打开电子邮件中包含的特制Visio附件，则这些文件可能允许远程执行指令。 Microsoft Visio 2003 Microsoft Visio 2002 临时解决方法： 不要打开或保存从不受信任来源或从受信任来源意外收到的Microsoft Visio文件。...

Winamp < 5.34a MP4 File Handling Overflow

Binary data 3976.prm...

clamav -- multiple vulnerabilities

Clamav had been found vulnerable to multiple vulnerabilities: Improper checking for the end of an buffer causing an unspecified attack vector. Insecure temporary file handling, which could be exploited to read sensitive information. A flaw in the parser engine which could allow a remote attacker ...

GLSA-200703-09 : Smb4K: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200703-09 Smb4K: Multiple vulnerabilities Kees Cook of the Ubuntu Security Team has identified multiple vulnerabilities in Smb4K. The writeFile function of smb4k/core/smb4kfileio.cpp makes insecure usage of temporary files. The...

Microsoft Windows资源管理器WMF文件处理拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统的资源管理器在处理畸形WMF文件时存在拒绝服务漏洞，可能导致资源管理器崩溃。 利用此漏洞无需直接打开畸形WMF文件，只要资源管理器处理包含畸形文件的目录时能导致崩溃。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows XP Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003...

Microsoft Windows XP2003 - Explorer .WMF File Handling Denial of Service

Microsoft Windows XP2003 - Explorer .WMF File Handling Denial of Service source: https://www.securityfocus.com/bid/22715/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user...

CVE-2007-0801

The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest...

MOAB-24-01-2007: Apple Software Update Catalog Filename Format String Vulnerability

Summary Apple Software Update is used for delivering patches to end-users, such as the Apple Security Update 2007-001. It relies on the HTTP protocol for retrieving files associated with each available patch, and handles the application/x-apple.sucatalog+xml MIME type and the sucatalog and swutmp...

Project and Project issue tracking - Multiple vulnerabilities

Multiple vulnerabilities have been discovered and fixed in the Project and Project issue tracking modules: Access bypass in Project issue tracking Due to an error in the projectissueaccess function, users with the 'Access project issues' permission would have full access to all issues on a site,...

CVE-2006-5964

CVE-2006-5964 affects PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 (PentaWare/PentaZip). The issue is a denial-of-service via right-clicking a file with a long filename, enabling local users and user-assisted remote attackers to crash the system. Root cause centers on handling of long filename...