378 matches found
Samsung mobile remote code execution vulnerability analysis-vulnerability warning-the black bar safety net
Summary A remote attacker to completely have the ability to control user web traffic, the manipulation Samsung phone keyboard update mechanism, and on the target phone using the system user permission to execute code. On Samsung devices pre-installed quick keyboard cannot be disabled also cannot ...
Samsung Galaxy S phones fail to properly validate SwiftKey language pack updates
Overview Samsung Galaxy S phones, including the S4 Mini, S4, S5, and S6, fail to properly validate Swiftkey language pack updates. Description CWE-345: Insufficient Verification of Data Authenticity - CVE-2015-4640Samsung Galaxy S phones, including the S4 Mini, S4, S5, and S6, are pre-installed...
Microsoft IIS 3.0/4.0 Double Byte Code Page Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/477/info This vulnerability could allow a web site viewer to obtain the source code for .asp and similar files if the server's default language Input Locale is set to Chinese, Japanese or Korean. How this works is as...
The browser cache is Vary broken
Jake, why are your blog posts always so depressing? -- Domenic Denicola @domenic Well, I wouldn't want to disappoint… TL;DR If you use "Vary" to negotiate content, the responses will fight for the same cache space. Additionally, IE ignores "max-age" and Safari is buggy. Content negotiation using...
ECShop shop system the latest versions contain vulnerabilities-vulnerability warning-the black bar safety net
This hole, actually I on 2 0 1 2 year 1 month of time to see ecshop on the analysis, originally due to feeling tasteless you didn't put out. Just under the official website latest version, didn't think also exist. Vulnerability file:/demo/index.php | 1 | if ! empty$POST'lang' //if not empty ---|-...
Microsoft IE语言包安装远程代码执行漏洞（MS07-033）
Internet Explorer是一款非常流行的WEB浏览器。 用于负责按需安装Internet Explorer语言包的例程存在竞争条件错误，成功利用此漏洞的攻击者可以完全控制受影响的系统。 如果网页所包含的一些内容是由所安装语言包不支持的语言编写的话，则用户访问了该网页就可以触发这个漏洞，导致内存破坏。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6...
Race condition
Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability."...
CVE-2007-3027
Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability."...
CVE-2007-3027
CVE-2007-3027 is a remote code execution issue in Microsoft Internet Explorer (5.01, 6, 7) caused by a race condition during language pack installation, which can trigger memory corruption when a page forces installation of multiple language packs. The vulnerability could allow an attacker to run...
Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to remote code-execution vulnerability because of a race-condition in its language-pack installation support. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application...
Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in routines responsible for the on-demand...
CVE-2005-2014
The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack...
CVE-2005-2014
The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack...
CVE-2005-2014
The vulnerability CVE-2005-2014 affects the web-based FAQ system paFAQ 1.0 Beta 4 . The issue lies in the "upload a language pack" feature, which allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack. The CVE entry notes a MEDIUM sever...
Microsoft Dynamics CRM 2015 Language Pack Update 1
Microsoft Dynamics CRM 2015 Language Pack Update 1...
Update for Microsoft Office Language Pack 2007 (for Office Outlook 2007 with Business Contact Manager ) (KB946307)
Update for Microsoft Office Language Pack 2007 for Office Outlook 2007 with Business Contact Manager KB946307...
Microsoft Dynamics CRM 2015 Language Pack Update 0.1
Microsoft Dynamics CRM 2015 Language Pack Update 0.1...
Microsoft .NET Framework 2.0 Service Pack 1 (KB110806) x64 Language Pack
Microsoft .NET Framework 2.0 Service Pack 1 KB110806 x64 Language Pack...