Asterisk IAX2隧道驱动IAX2_Write函数远程栈溢出漏洞

BUGTRAQ ID: 24949 CVECAN ID: CVE-2007-3762 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk IAX2隧道驱动（chaniax2）中存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向chaniax2传送了数据负载大于4 kB的RTP帧的话，就可能触发这个漏洞。如果要触发这个漏洞，调用iax2write的帧应满足以下条件： 语音或视频帧 4字节的时间戳与之前所发送帧高2字节相同 格式为预期格式 数据负载大于4kB...

security flaw

Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME 1 during the load stage or 2 in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or execute certain JavaScript code, as demonstrated by code that intercepts keystrok...

Mozilla Foundation Security Advisory 2007-20

Mozilla Foundation Security Advisory 2007-20 Title: Frame spoofing while window is loading Impact: Low Announced: July 17, 2007 Reporter: Ronen Zilberman and Michal Zalewski Products: Firefox Fixed in: Firefox 2.0.0.5 Description Ronen Zilberman and Michal Zalewski both reported that it was...

DEBIAN-CVE-2007-3763

The IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted 1 LAGRQ or 2 LAGRP...

CVE-2007-3762

Stack-based buffer overflow in the IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a...

CVE-2007-3762

Stack-based buffer overflow in the IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a...

Frame spoofing while window is loading — Mozilla

Ronen Zilberman and Michal Zalewski both reported that it was possible to exploit a timing issue to inject content into about:blank frames in a page. When opening a window from a script, it is possible to spoof the content of the newly opened window's frames within a short time frame, while the...

Unfixed Frame Redirect vulnerability at www.chioggia.org

Security researcher Stuarty, has submitted on 13/07/2007 a Frame Redirect vulnerability affecting www.chioggia.org, which at the time of submission ranked 1254088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is currently...

Unfixed Frame Redirect vulnerability at www.omitron.com

Security researcher Stuarty, has submitted on 13/07/2007 a Frame Redirect vulnerability affecting www.omitron.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is currently unfixed. If...

Unfixed Frame Redirect vulnerability at www.downtownla.com

Security researcher Stuarty, has submitted on 13/07/2007 a Frame Redirect vulnerability affecting www.downtownla.com, which at the time of submission ranked 738712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is currently...

Unfixed Frame Redirect vulnerability at auction-in-europe.com

Security researcher Stuarty, has submitted on 07/07/2007 a Frame Redirect vulnerability affecting auction-in-europe.com, which at the time of submission ranked 705012 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is currently...

Unfixed Frame Redirect vulnerability at www.centralpoint.nl

Security researcher Stuarty, has submitted on 07/07/2007 a Frame Redirect vulnerability affecting www.centralpoint.nl, which at the time of submission ranked 57571 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is currently...

Unfixed Frame Redirect vulnerability at www.eandi.coop

Security researcher Nullflow, has submitted on 25/06/2007 a Frame Redirect vulnerability affecting www.eandi.coop, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/06/2007. It is currently unfixed. If...

Unfixed Frame Redirect vulnerability at www.cpb.org.br

Security researcher Nullflow, has submitted on 25/06/2007 a Frame Redirect vulnerability affecting www.cpb.org.br, which at the time of submission ranked 415049 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2007. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.coav.org.br

Security researcher Nullflow, has submitted on 25/06/2007 a Frame Redirect vulnerability affecting www.coav.org.br, which at the time of submission ranked 2124449 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2007. It is currently...

Unfixed Frame Redirect vulnerability at library.city.nara.nara.jp

Security researcher Nullflow, has submitted on 25/06/2007 a Frame Redirect vulnerability affecting library.city.nara.nara.jp, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2007. It is currently...

Unfixed Frame Redirect vulnerability at lib.city.kamakura.kanagawa.jp

Security researcher Nullflow, has submitted on 25/06/2007 a Frame Redirect vulnerability affecting lib.city.kamakura.kanagawa.jp, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/06/2007. It is current...

Unfixed Frame Redirect vulnerability at www.umh.es

Security researcher Nullflow, has submitted on 25/06/2007 a Frame Redirect vulnerability affecting www.umh.es, which at the time of submission ranked 29001 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2007. It is currently unfixed. If...

Apple WebKit frame rendering memory corruption vulnerability

Overview The Apple Webkit contains a memory corruption vulnerability.This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description According to Apple: WebKit is the open source core of Apple's Safari web browser. It is available as a framework in Mac OS X...

Unfixed Frame Redirect vulnerability at www.rihca.org

Security researcher Nullflow, has submitted on 20/06/2007 a Frame Redirect vulnerability affecting www.rihca.org, which at the time of submission ranked 9213647 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/06/2007. It is currently unfixed...