ICQ < 6 Build 6059 Message Processing Format String

The version of ICQ installed on the remote host is earlier than 6 Build 6059. Such versions reportedly are affected by a format string vulnerability in the embedded Internet Explorer component triggered when processing HTML messages with a format string specifier such as '%020000000p'. If a remot...

CVE-2005-2024

Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...

CVE-2005-2024

Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...

CVE-2005-2024: Undefined Security Weakness

Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...

CVE-2005-2024

Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...

DEBIAN-CVE-2005-2024

Vipul Razor Agents razor-agents before 2.70 allows remote attackers to cause a denial of service via 1 certain "unusual HTML messages" or 2 "certain malformed headers" such as Content-Type...

razor-agents -- denial of service vulnerability

A Secunia security advisory reports: Two vulnerabilities have been reported in Razor-agents, which can be exploited by malicious people to cause a DoS Denial of Service. An unspecified error in the preprocessing of certain HTML messages can be exploited to crash the application. A bug in the...

CVE-2004-2401

Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."...

Usermin crossite scripting

Crossite scripting with HTML messages...

CVE-2002-1459

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...

CVE-2002-1458

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, 3 Subject and 4 Body...

L-Forum XSS and upload spoofing

L-Forum XSS and upload spoofing PROGRAM: L-Forum VENDOR: Leszek Krupinski [email protected] HOMEPAGE: http://l-forum.x-php.net/ VULNERABLE VERSIONS: 2.4.0, possibly others IMMUNE VERSIONS: none, but an official patch is available for some issues SEVERITY: high LOGIN REQUIRED: no DESCRIPTION: "L-Foru...