3309 matches found
CVE-2008-5354
Stack-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with...
CVE-2008-5332
Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lib parameter to files in lib/action/ including a alias.php, b cancel.php, c context.php, d deadlinks.php, e delete.php, and others; and the 2...
ClamAV < 0.94.2 (JPG File) Stack Overflow PoC
No description provided by source. const char crashstr = "\xff\xd8" // jpg marker "\xff\xed" // exif data "\x00\x02" // length "Photoshop 3.0\x00" "8BIM" "\x04\x0c" // thumbnail id "\x00" "\x01" "\x01\x01\x01\x01" "0123456789012345678912345678"; // skip over 28 bytes include stdio.h include...
CVE-2008-5138
passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...
CVE-2008-5072
vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service application crash via a malformed FLV file...
CVE-2008-5008
Buffer overflow in src/srcsinc.c in Secret Rabbit Code aka SRC or libsamplerate before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file...
EUVD-2008-4801
Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy...
CVE-2008-4473
Adobe Flash CS3 Professional on Windows is affected by CVE-2008-4473 due to multiple heap-based buffer overflows in SWF processing caused by extremely long control parameter data in a malicious SWF. The issue, affecting Flash CS3 on Windows and Flash MX 2004, could allow remote code execution. Op...
Heap overflow
Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers to execute arbitrary code via an M3u file with a "long entry." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
DSA-1643-1 feta - denial of service
Bulletin has no description...
EUVD-2008-4304
Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...
CVE-2008-3940
Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...
Php168 read arbitrary file vulnerability-vulnerability warning-the black bar safety net
Reprint address: http://hi.baidu.com/saiyhi/ Oh, forgot to say, the program official URL: http://www.php168.com/ 代码 :..job.php Line:1 1 7 if eregi". php",$url die"ERR"; $fileurl=strreplace$webdbwwwurl,"",$url; ifisfilePHP168PATH."$ fileurl"&&filesizePHP168PATH."$ fileurl"1 0 2 41 0 2 45 0 0...
K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting
Overview analysis.cgi included in K's CGI Access Log Kaiseki Jcode.pm contains a cross-site scripting vulnerability. K's CGI Access Log Kaiseki is a program to analyze access to a web page. analysis.cgi included in Access Log Kaiseki Jcode.pm contains a cross-site scripting vulnerability. The...
CVE-2008-2942
Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...
PT-2008-4379
Name of the Vulnerable Software and Affected Versions Mercurial versions 1.0.1 through 1.0.1 Mercurial versions prior to 1.0.2 Description The issue allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file. This is due to a directory traversal...
CVE-2008-2837
SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the menuclick parameter...
iDefense Security Advisory 06.10.08: Multiple Vendor OpenOffice rtl_allocateMemory() Integer Overflow Vulnerability
iDefense Security Advisory 06.10.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 10, 2008 I. BACKGROUND OpenOffice is an open-source desktop office suite for many of today's popular operating systems. For more information, see the vendor's site found at the following URL...
Cosminexus javadoc Cross-Site Scripting Vulnerability
Overview The javadoc command of Cosminexus may generate an HTML file that contains cross-site scripting vulnerabilities. Impact An attacker could exploit said HTML file vulnerable to cross-site scripting. Solution Please refer to the 'Vendor Information' section for official remediation and take...
