10943 matches found
CVE-2010-1909
CVE-2010-1909: Buffer overflow in the RunCmd method of the SdcUser.TgConCtl ActiveX control (tgctlcm.dll) used by Consona Live Assistance, Dynamic Agent, and Subscriber Assistance. This vulnerability permits remote code execution via CreateProcess params. Exploitation details are not fully provid...
CVE-2010-1912
The SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to bypass intended restrictions on ActiveX execution via "instantiation/free attacks."...
CVE-2010-1913
The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance, when downloaded from a server operated by Telefonica or possibly other companies, contains an incorrect DNS whitelist that include...
EUVD-2010-1928
Buffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to execute arbitrary code via vectors involving "CreateProcess params." NOTE: some of these details are obtained...
CVE-2010-1911
The CVE affects Consona Live Assistance components (tgctlcm.dll via the SdcWebSecureBase interface). The vulnerability arises from gating ActiveX control execution on a maintained whitelist of server domain names, enabling MITM DNS hijacking to trigger arbitrary code execution. The description do...
CVE-2010-1913
The CVE-2010-1913 issue affects the SdcWebSecureBase interface’s tgctlcm.dll used by Consona Live Assistance, Dynamic Agent, and Subscriber Assistance. When plugins/clients are downloaded from a Telefonica-operated server (or similar), its default pluginlicense.ini contains an incorrect DNS white...
CVE-2010-1907
The CVE-2010-1907 entry concerns the SdcUser.TgConCtl ActiveX control in tgctlcm.dll used by Consona Live Assistance, Dynamic Agent, and Subscriber Assistance. The vulnerability allows remote attackers to discover the client user’s username and deduce a path to a user directory via GetUserName. I...
CVE-2010-1908
The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance does not properly restrict access to the HTTPDownloadFile, HTTPGetFile, Install, and RunCmd methods, which allows remote attackers to execute arbitrary programs via a URL in th...
CVE-2010-1905
CVE-2010-1905 concerns multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance. The XSS can be triggered by crafted input to ASP pages, demonstrated via the backurl parameter to sdccommon/verify/asp/n6plugindestructor.asp. The avail...
CVE-2010-1905
Multiple cross-site scripting XSS vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted input to ASP pages, as demonstrated using the backurl parameter to...
Microsoft Patches Worm Holes in Mail Server, Visual Basic for Apps
Microsoft today issued patches for a pair of critical remote code execution vulnerabilities in Windows and Microsoft Office and urged affected users to apply the fixes as soon as possible. The most serious issue, addressed in the MS10-030 bulletin, affects Outlook Express, Windows Mail and Window...
Microsoft Security Bulletin MS10-030 - Critical Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)
Microsoft Security Bulletin MS10-030 - Critical Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution 978542 Published: May 11, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Outlook Express...
dvipng / TeX Live memory corruption
Memory corruption on DVI files processing...
[USN-937-1] TeX Live vulnerabilities
=========================================================== Ubuntu Security Notice USN-937-1 May 06, 2010 texlive-bin vulnerabilities CVE-2009-1284, CVE-2010-0739, CVE-2010-0827, CVE-2010-1440 =========================================================== A security issue affects the following Ubunt...
Marinet cms SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================= Marinet cms SQL Injection Vulnerability ======================================= Name: Marinet cms SQL Injection Vulnerability Date: 2010-05-11 vendor: http://www.marinet.gr/ Author: Ashiyane Digital...
MiniManager For Mangos/Trinity Server DoS Vulnerability
Exploit for php platform in category dos / poc ======================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability ======================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability Download :...
phpscripte24 Live Shopping Multi Portal System - SQL Injection
phpscripte24 Live Shopping Multi Portal System - SQL Injection ----------------------------Information--------------------------------------------------- +Name : phpscripte24 Live Shopping Multi Portal System SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date :...
DEBIAN-CVE-2010-1440
Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a special command in a DVI file, related to the 1 predospecial and 2 bbdospecial function...
CVE-2010-0827
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted virtual font VF file associated with a DVI file...
DEBIAN-CVE-2010-0827
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted virtual font VF file associated with a DVI file...