Asterisk: IAX2 video frame buffer overflow

Background Asterisk is an open source implementation of a telephone private branch exchange PBX. Description Asterisk fails to properly check the length of truncated video frames in the IAX2 channel driver which results in a buffer overflow. Impact An attacker could exploit this vulnerability by...

Multiple Microsoft Internet Explorer security vulnerabilities

Multiple memory corruptions, address bar spoofing, cross-frame data access. May be used for hidden malware installation...

CVE-2006-2785

Cross-site scripting XSS vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into 1 performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or 2 selecting "Show on...

CVE-2006-2785

Cross-site scripting XSS vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into 1 performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or 2 selecting "Show on...

Multiple SAP Business Coneector security vulnerability

File access, frame spoofing...

FreeBSD : Macromedia flash player -- swf file handling arbitrary code (aed343b4-5480-11da-b579-001125afbed7)

A Secunia Advisory reports : A vulnerability has been reported in Macromedia Flash Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used ...

From head to toe understanding the buffer overflow-vulnerability warning-the black bar safety net

In this guide, we will discuss what is buffer overflow and how to use it. You must understand the C language and Assembly language, if you are familiar with GDB while more is good, of course it is not very necessary. Memory organizationmemory is divided into 3 parts 1. The text areaprogram area...

Hostaupd IEEE 802.11 authentication daemon DoS

DoS on invalid EAPoL frame...

Design/Logic Flaw

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213: Undefined Security Weakness

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

security flaw

webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame via a URL in the rightframe parameter. NOTE: this has been called a cross-site scripting XSS issue, but it is different than what is normally identified as XSS...

Design/Logic Flaw

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...

CVE-2006-1987

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...

CVE-2006-1987

Apple Safari 2.0.3 is affected by a denial-of-service and possible code execution vulnerability tied to invalid FRAME tag handling, potentially triggered by (1) multiple SCROLLING attributes with no values or (2) a SRC attribute with no value. The original note indicates uncertainty about which v...

CVE-2006-1987: Undefined Security Weakness

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...

Sybase EAServer 5.2 (WebConsole) Remote Stack Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Stack overflow

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame...

CVE-2006-1385

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame...

CVE-2006-1385

KISMAC (R54–R73p) is affected by a stack-based buffer overflow in the parseTaggedData function of WavePacket.mm. The vulnerability allows remote attackers to execute arbitrary code by crafting multiple SSIDs in a Cisco vendor tag within an 802.11 management frame. The issue is triggered via malfo...