Critical: Red Hat Security Advisory: : Updated PHP packages are available [updated 2002-Mar-11]

Updated PHP packages are available to fix vulnerabilities in the functions that parse multipart MIME data, which are used when uploading files through forms. This revised advisory contains updated packages for Red Hat Linux 7, 7.1, and 7.2. PHP is an HTML-embeddable scripting language. A number o...

CVE-2001-0999

CVE-2001-0999 concerns Outlook Express 6.00, where remote attackers could cause arbitrary script execution by embedding SCRIPT tags in a message with MIME type text/plain. This contradicts the expected behavior that text/plain messages do not run scripts. The available references (NVD, CVE List) ...

CVE-2001-0999

Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script...

MSIE may download and run programs automatically - details

This posting briefly describes some technical details of the vulnerability discussed in the Bugtraq messages with the subjects "MSIE may download and run progams automatically" Dec 14 2001 and "File extensions spoofable in MSIE download dialog" Nov 26 2001. The flaw allows a malicious web site to...

Advisory CA-2001-36 Microsoft Internet Explorer Does Not Respect Content-Disposition and Content-Type MIME Headers

CERT Advisory CA-2001-36 Microsoft Internet Explorer Does Not Respect Content-Disposition and Content-Type MIME Headers Original release date: December 19, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Microsoft Internet...

Microsoft Internet Explorer Does Not Respect Content-Disposition and Content-Type MIME Headers

Overview Microsoft Internet Explorer contains a vulnerability in its handling of certain MIME headers in web pages and HTML email messages. This vulnerability may allow an attacker to execute arbitrary code on the victim's system when the victim visits a web page or views an HTML email message...

CVE-2001-0544

IIS 5.0 allows local users to cause a denial of service hang via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table...

CVE-2001-0712

The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text .txt, JPEG .jpg, et...

[SECURITY] [DSA 081-1] New w3m packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 081-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Packages : w3m, w3m-ssl...

CVE-2001-0712

The CVE concerns Internet Explorer’s rendering engine where MIME types are determined by the client rather than the server. This enables remote servers to coax script execution from files whose MIME type would not normally be treated as executable (e.g., .txt, .jpg). Reported impact scores indica...

CVE-2001-0712

The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text .txt, JPEG .jpg, et...

CVE-2001-0677

Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Attachment Converted" MIME header, which sends the file when the email is forwarded to the attacker by the user...

CVE-2001-0700

Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header...

Buffer Overflows in various email clients

Overview Buffer Overflows in several MIME headers affect a large number of electronic mail clients. Description A variety of electronic mail clients circa 1998 are vulnerable to buffer overflow attacks in the code that processes MIME headers. See the vendor statements referenced below for details...

CVE-1999-0926

Apache allows remote attackers to conduct a denial of service via a large number of MIME headers...

CVE-1999-0926

Technical details beyond the minimal description are not publicly provided in the supplied documents. Monitor for updates on affected products, versions, and fixes.

Большая дырка в Outlook Express (E-mail execution)

Можно заставить Outlook Express выполнить файл прикрепленный к письму указав тип MIME подразумевающий его немедленное открытие например поточное видео. Кроме того, имеются переполнения буфера. Имя файла обрезается до определенной позиции, что позволяет обойти защиту, используя безопасное...

Переполнение буфера в w3m (buffer overflow)

переполнение буфера при разборе MIME-заголовков ответа сервера...

[SNS Advisory No.32] w3m malformed MIME header Buffer Overflow Vulnerability

----------------------------------------------------------------------- SNS Advisory No.32 w3m malformed MIME header Buffer Overflow Vulnerability Problem first discovered: Thu, 25 May 2001 Published: Wed, 19 Jun 2001 Last Updated: Wed, 19 Jun 2001...

W3M 0.10.2 - Malformed MIME Header Buffer Overflow

W3M 0.10.2 - Malformed MIME Header Buffer Overflow source: https://www.securityfocus.com/bid/2895/info W3M is a pager/text-based WWW browser similiar to lynx. A buffer overflow vulnerability exists in the 'w3m' client program. The overflow occurs when a base64-encoded string exceeding approximate...