3960 matches found
Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution
Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by entici...
CVE-2010-0927
CVE-2010-0927 describes a cross-site scripting (XSS) vulnerability in IBM Lotus Domino’s Help component (help/readme.nsf/Header). Affected are Domino 7.x prior to 7.0.4 and 8.x prior to 8.0.2; the issue allows remote attackers to inject arbitrary script/HTML via the BaseTarget parameter in an Ope...
CVE-2010-0927: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in help/readme.nsf/Header in the Help component in IBM Lotus Domino 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the BaseTarget parameter in an OpenPage action. NOTE: this may overlap CVE-2010-0920...
Internet Explorer HHCtrl.ocx Image Property Heap Corruption (MS06-046; CVE-2006-3357)
Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The browser is also compatible with Microsoft's Common Object Model COM scheme, whereby...
Microsoft VBScript MsgBox Call with Malicious HLP File (CVE-2010-0483)
A remote code execution vulnerability has been discovered in the way that VBScript interacts with Windows Help files when using Internet Explorer. The vulnerability is due to the VBScript functionality available from within Internet Explorer that exposes the MsgBox function, allowing script on a...
Microsoft Releases Security Advisory to Address VBScript Vulnerability
Microsoft has released a security advisory to address a vulnerability in VBScript. The advisory indicates that this vulnerability exists in the way that VBScript interacts with Windows Help files when using Internet Explorer. By convincing a user to view a specially crafted HTML document web page...
Microsoft Warns of New IE Code Execution Flaw
Microsoft’s security response team is investigating reports of a potentially dangerous code execution vulnerability in its flagship Internet Explorer browser. The company warned that an attacker could host a maliciously crafted web page and run arbitrary code if they could convince a user to visi...
Internet Explorer VBScript Windows Help arbitrary code execution
Overview Microsoft Internet Explorer is vulnerable to arbitrary code execution through the use of VBScript and Windows Help. Description Microsoft Internet Explorer supports the use of VBScript, in addition to the more widely-used JavaScript scripting language. Several VBScript commands allow a...
Bank Trojan Annoys Users With Pop Ups
Researchers recently came face to face with a Trojan with an aggressive modus operandi – it continually forces you to update your banking credentials with irritating pop up windows. Read the full article. Help Net Security...
Hybserv2 :help命令远程拒绝服务漏洞
BUGTRAQ ID: 38006 CVE ID: CVE-2010-0303 Hybserv2是改进版的Hybserv IRC服务器，可提供即时会话服务。 Hybserv2的mystring.c文件中存在拒绝服务漏洞，远程用户可以通过向MemoServ服务发送包含有help \t选项的私人消息导致守护程序崩溃。 Hybserv2 Hybserv2 1.9.4 Hybserv2 Hybserv2 1.9.3 Hybserv2 Hybserv2 1.9.2 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1982-1）以及相应补丁:...
DEBIAN-CVE-2010-0300
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
UBUNTU-CVE-2010-0300
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
Null pointer dereference
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
CVE-2010-0300
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
CVE-2010-0300: Undefined Security Weakness
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
hybrid and ratbox IRC servers multiple security vulnerabilities
LINKS command, integer overflow, HELP command DoS...
ircd-ratbox 'HELP' Command Denial Of Service Vulnerability
The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100471";...
DSA-1980-1 ircd-hybrid ircd-ratbox - arbitrary code execution
Bulletin has no description...
irc-ratbox -- multiple vulnerabilities
SecurityFocus reports: The first affects the /quote HELP module and allows a user to trigger an IRCD crash on some platforms. The second affects the /links processing module when the flattenlinks configuration option is not enabled...
PT-2010-2124 · Typo3 · Typo3 Helpdesk (Mg Help) Extension
Name of the Vulnerable Software and Affected Versions: TYPO3 Helpdesk mg help extension version 1.1.6 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions 1.1.6 and earlier, update to a version later than 1.1.6 to...