F-Secure Product(s) Integer Overflow Vulnerability (Windows)

This host is installed with F-Secure Products and is prone to Integer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfsecureprdtsintoverflowvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ F-Secure Products Integer Overflow Vulnerability Windows Authors: Sharath S Copyright: Copyright c 20...

WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

CVE-2009-0850

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

Cross site scripting

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

CVE-2009-0850

BitDefender Internet Security 2009 is vulnerable to a cross-site scripting (XSS) flaw in the way it handles filenames inside virus-infected archive files (RAR/ZIP). This user-assisted exploit can inject arbitrary web script or HTML via the archive filename, as described for CVE-2009-0850. The vul...

Google launching members-only security forum

internetnews.com’s Kenneth Corbin has the scoop on plans by Google to launch a members-only security forum for businesses, law enforcement, government agencies and others to combat malware and fraud on the Web. In addition to Google, the Internet Security Community will draw participation from...

BitDefender Internet Security 2009文件名跨站脚本漏洞

BUGTRAQ ID: 33921 BitDefender Internet Security是可提供多种防护功能的安全软件。 在扫描文件时BitDefender Internet Security使用flash显示文件名。如果用户准备了包含有恶意脚本的畸形的rar或zip压缩文档，则当杀毒软件扫描到该文件时就会执行脚本。 Softwin BitDefender Internet Security 2009 厂商补丁： Softwin ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Fedora Update for ekiga FEDORA-2007-321

Check for the Version of ekiga OpenVAS Vulnerability Test Fedora Update for ekiga FEDORA-2007-321 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Orbit Downloader 2.8.4 - 'Hostname' Remote Buffer Overflow

Orbit Vulnerability discovered by Secunia Exploit and POC provided by: JavaGuru Right click on link below then choose download by orbit, CALC.EXE will pop up I got a lot of problems when trying to execute shellcode, because a lot of chars was forbidden and I was not able to execute shellcode. Aft...

BitDefender Cross Site Scripting

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

BitDefender Internet Security XSS

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

Exploit for hardware platform in category remote exploits ============================================= Optus/Huawei E960 HSDPA Router SMS XSS Attack ============================================= XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router...

Heap overflow

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3865

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3865

CVE-2008-3865 stems from multiple heap-based buffer overflows in Trend Micro’s Network Security Component (NSC) firewall module, within the ApiThread() function of the firewall service (TmPfw.exe). Affected products include Trend Micro OfficeScan 8.0 SP1 Patch 1 and Trend Micro Internet Security ...

CVE-2008-3865

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3864

CVE-2008-3864 affects Trend Micro Network Security Component (NSC) firewall modules. The ApiThread() function in the firewall service (TmPfw.exe) processes packets to the default port 40000/TCP and can trigger a heap-based overflow when a size field contains an oversized value, causing a denial o...

Trend Micro OfficeScan / Trend Micro Internet Security multiple security vulnerabilities

Firewall settings manipulations, DoS...

PT-2009-05: CA Internet Security Suite Denial of Service Vulnerability

Positive Technologies Research Team has discovered a denial of service DoS vulnerability in CA Internet Security Suite. The IOCTL handler in vetmonnt.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Solution Install latest...

Wordpress Forced Upgrade Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2008-001 - Original release date: January 3rd, 2008 - Last revised: December 22nd, 2008 - Discovered by: Jesus Olmos Gonzalez - Severity: 2/5 ============================================= I. VULNERABILITY...