2106 matches found
Chasys媒体播放器播放列表文件处理栈溢出漏洞
BUGTRAQ ID: 34165 Chasys Media Player是一款多用途的媒体播放器。 如果用户使用Chasys媒体播放器加载了畸形的.pls或.m3u播放列表文件的话，就可能触发栈溢出，导致执行任意代码。 John Paul Chacha Chasys Media Player 1.1 厂商补丁： John Paul Chacha ---------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.jpcha2.com/index.php...
DSA-1750-1 libpng - several vulnerabilities
Bulletin has no description...
RedHat Update for thunderbird RHSA-2008:0105-01
Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2008:0105-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
CVE-2008-3075
The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" exclamation point shell metacharacter in 1 the filename of a ZIP archive and possibly 2 the filename of the first file in a ZIP archive, which is not properly...
CVE-2009-0261
creationtimestamp| type| source ---|---|--- 2009-01-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7839 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/totalvideoplayerinibof.rb 2025-10-23...
CVE-2009-0168
CVE-2009-0168 affects Sun Solaris 10 and OpenSolaris (snv_61–snv_106). The vulnerability in ppdmgr allows local denial of service due to improper handling of temporary/cache files and a failure to include all cache files. Public sources in the connected data confirm affected platforms (Solaris 10...
Gentoo Security Advisory GLSA 200812-08 (mgetty)
The remote host is missing updates announced in advisory GLSA 200812-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-677-1: OpenOffice.org vulnerabilities
Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges. CVE-2008-2237, CVE-2008-2238 Dmitry E. Oboukhov...
DTSA-177-1 liquidsoap - insecure temporary file handling
Bulletin has no description...
CVE-2008-4930
MyBB aka MyBulletinBoard 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing....
VLC Media Player < 0.9.5 TY Media File Handling Memory Curruption (deprecated)
Binary data 4726.prm...
WebSVN <= 2.0 (XSS/FH/CE) Multiple Remote Vulnerabilities
No description provided by source. WebSVN = 2.0 Multiple Vulnerabilities October 20, 2008 Vendor : Tim Armes URL : http://websvn.tigris.org Version : WebSVN = 2.0 Risk : Multiple Vulnerabilities Description: WebSVN is an online SVN repository viewer. The description taken from the project website...
websvn-xssfhce.txt
WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS functionality used by WebSVN. The issue is caused by the following bit o...
WebSVN 2.0 - Cross-Site Scripting File Handling Code Execution
WebSVN 2.0 - Cross-Site Scripting File Handling Code Execution WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS...
WebSVN 2.0 - Cross-Site Scripting / File Handling / Code Execution
WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS functionality used by WebSVN. The issue is caused by the following bit o...
WebSVN <= 2.0 (XSS/FH/CE) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Ha...
[SECURITY] [DSA 1643-1] New feta packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1643-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 05, 2008 http://www.debian.org/security/faq -...
Debian DSA-1643-1 : feta - insecure temp file handling
Dmitry E. Oboukhov discovered that the 'to-upgrade' plugin of Feta, a simpler interface to APT, dpkg, and other Debian package tools creates temporary files insecurely, which may lead to local denial of service through symlink attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Gentoo Security Advisory GLSA 200404-01 (Portage)
The remote host is missing updates announced in advisory GLSA 200404-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200501-31 (teTeX)
The remote host is missing updates announced in advisory GLSA 200501-31. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...