6538 matches found
CVE-2007-3794
CVE-2007-3794 is a concrete buffer overflow vulnerability affecting Hitachi Cosminexus components (Cosminexus V4 through V7, Processing Kit for XML, Developer’s Kit for Java) and third‑party software using this stack. The issue arises when processing GIF images via image‑processing APIs in a Java...
emul-linux-x86-java: Multiple vulnerabilities
Background emul-linux-x86-java is the 32 bit version of the Sun's J2SE Development Kit. Description Chris Evans of the Google Security Team has discovered an integer overflow in the ICC parser, and another vulnerability in the BMP parser. An unspecified vulnerability involving an "incorrect use o...
csc-sqlxss.txt
--- Comersus Shop Cart 7.07 SQL Injection & XSS Comersus is an active server pages asp software for running shopping stores, integrated with the rest of your web site. Comersus ASP Cart is free and IT CAN BE used for commercial purposes. An attacker may leverage this issue to have arbitrary scrip...
[ GLSA 200705-23 ] Sun JDK/JRE: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 200705-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Sun JDK/JRE: Multiple vulnerabilities
Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description An unspecified vulnerability involving an "incorrect use of system classes" was reported by the Fujitsu security team. Additionally, Chris Evans from the Google Security...
file integer overflow
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert statement. NOTE: this issue is due to an...
Integer overflow
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert statement. NOTE: this issue is due to an...
Code injection
The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...
CVE-2007-2789
The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...
Integer overflow
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.120 and earlier...
CVE-2007-2789
CVE-2007-2789 concerns the BMP image parser in Sun JDK/JRE on Unix/Linux, where untrusted applets or applications that open arbitrary local files via a crafted BMP can cause the JVM to hang (DoS). Affected product ranges include JDK/JRE prior to 1.5.0_11-b03, 1.6.x prior to 1.6.0_01-b06, and olde...
Buffer overflow
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...
CVE-2007-2623
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...
CVE-2007-2623
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...
CVE-2007-2623
CVE-2007-2623 describes multiple buffer overflows in RControl.dll of Remote Display Dev kit 1.2.1.0 that allow remote denial of service (IE7 crash) via either (1) a long first argument to the connect function or (2) a long InternalServer property value, potentially involving ntdll.dll. The availa...
Remote Display Dev kit 1.2.1.0 RControl.dll Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================================== Remote Display Dev kit 1.2.1.0 RControl.dll Denial of Service Exploit ===================================================================== 2007/05/10...
Remote Display Dev kit 1.2.1.0 - 'RControl.dll' Denial of Service
2007/05/10 ----------------------------------------------------------------------------- RControl.dll v. 1.2.1.0 Denial of Service Exploit url: http://www.fruit2004.com/ price: only $20 : author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...
CVE-2007-2466
CVE-2007-2466 affects the LDAP Software Development Kit (SDK) for C used in Sun Java System Directory Server 5.2 (up to Patch 4) and Sun ONE Directory Server 5.1. The vulnerability is described as unspecified but enables remote attackers to cause a denial of service (crash) via certain BER encodi...
Asterisk SIP T.38 SDP解析远程栈溢出漏洞
Asterisk是一款PBX系统的软件，运行在Linux系统上，支持使用SIP、IAX、H323协议进行IP通话。 Asterisk的SIP/SDP处理器中存在多个远程栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果所发送SIP报文中的SDP数据包含有超长的T38参数的话，就可以触发这个溢出，导致执行任意代码。这个漏洞是由chansip.c文件中的processsdp函数调用sscanf所导致的： else if sscanfa, "T38FaxRateManagement:%s", s == 1 found = 1; if optiondebug 2 astlogLOGDEBUG...