1988 matches found
RealNetwork RealPlayer 10.5 - '.MID' File Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/22050/info RealNetwork RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files. Exploiting this issue allows remote attackers to crash the application, denying further service to...
Kaspersky Anti-Virus PE File Handling DoS
The version of Kaspersky Anti-Virus installed on the remote host is affected by a denial of service issue that can be triggered with a specially crafted PE portable executable file to send the scanning engine into an infinite loop and prevent scanning of other files. C Tenable Network Security,...
Multiple Oracle application server vulnerabilities
SQL injections, DoS, data modification, crossite scripting, privilege escalation, audit setings modification. Password is passed from JDeveloper to SQLPlus in cleartext. JDeveloper password is stored in cleartext in different XML configuration files. Cleartext FormBuilder password is stored in...
Microsoft Windows文件名单处理本地权限提升漏洞（MS06-075）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的Client-Server运行时子系统在处理文件列表时存在漏洞，本地攻击者可能利用此漏洞提升自己权限，获取系统的完全控制。 当以特制的文件列表启动应用程序的时候可能触发此漏洞。 Microsoft Windows XP Microsoft Windows 2003 Microsoft已经为此发布了一个安全公告（MS06-075）以及相应补丁: MS06-075：Microsoft Security Bulletin MS06-075...
Adobe Download Manager < 2.2 AOM File Handling Section Name Overflow
There is a version Adobe Download Manager installed on the remote Windows host that is vulnerable to a remote buffer overflow attack because the application fails to perform boundary checks while processing AOM files. In order to trigger this issue, an attacker needs to entice a user to visit a...
7-Zip ARJ File Handling Overflow
The remote host contains a version of the open source 7-Zip file archiver and included in third-party products such as Knownsoft's Turbo Searcher. The version of this software installed on the remote host contains a buffer overflow in its ARJ file handling library that is triggered when handling ...
Quintessential Player <= 4.50.1.82 (Playlist) Denial of Service PoC
No description provided by source. / 0-day Quintessential Player = 4.50.1.82 Playlist Denial Of Service PoC ======================================================================== ======================================================================== Quintessential Player 4.50.1.82 and lower...
Business Objects Crystal Reports XI Professional - File Handling Buffer Overflow
Business Objects Crystal Reports XI Professional - File Handling Buffer Overflow source: https://www.securityfocus.com/bid/21261/info Business Objects Crystal Reports XI Professional is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied...
Business Objects Crystal Reports XI Professional - File Handling Buffer Overflow
source: https://www.securityfocus.com/bid/21261/info Business Objects Crystal Reports XI Professional is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. An atacker may...
USN-376-2: imlib2 regression fix
USN-376-1 provided an update to imlib2 to fix several security vulnerabilities. Unfortunately the update broke JPG file handling in certain situations. This update corrects this problem. We apologize for the inconvenience...
IMCE file handling vulnerabilities
IMCE has two vulnerabilities with regards to file handling. 1. By passing relative paths to IMCE's delete function, a malicious user with the "delete files" permission can delete files anywhere in the directory tree depending on the access permissions of the webserver. 2. IMCE allows the upload...
mcGalleryPRO 2006 - 'path_to_folder' Remote File Inclusion
SolpotCrew Community Mcgallerypro pathtofolder Remote File Inclusion Download file : http://phpforums.net/mcgp/mcgp.zip/mcgp.zip Bug Found By :Solpot a.k.a k. Hasibuan 10-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-06.txt Greetz: choi , h4ntu ,...
CentOS 4 : kdebase (CESA-2006:0582)
Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...
ZipCentral 4.01 - '.ZIP' File Handling Local Buffer Overflow
/ ZipCentral 4.01 Exploit by bratax http://www.bratax.be/ Soooooo many thanks to BuzzDee and c0rrupt for helping me with all the problems I encountered : Wouldn't have finished this without you guys! Greetz to everyone I like... no, that doesn't include you turb00! Some technical info: -...
kdebase security update
CentOS Errata and Security Advisory CESA-2006:0582 Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop...
Low: Red Hat Security Advisory: kdebase security fix
Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...
[Full-disclosure] TinyPHPForum Multiple Vulnerabilities
TinyPHPForum Multiple Vulnerabilities. http://sourceforge.net/projects/tinyphpforum/ ---------------------------------------------------- TinyPHPForum is a forum based on file handling. And has shown multiple vulnerabilities in several previous releases. Here I present the bugs for the actual...
Low: Red Hat Bug Fix Advisory: perl bug fix update
Updated perl packages that fix various bugs are now available. Perl is a high-level programming language with roots in C, sed, awk and shell scripting. This update addresses the following issues: - perl operation in UTF-8 enabled locales - handling an alarm signal while a waitpid is in progress -...
