6193 matches found
CVE-2001-0677
Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Attachment Converted" MIME header, which sends the file when the email is forwarded to the attacker by the user...
CVE-2001-0700
Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header...
Buffer Overflows in various email clients
Overview Buffer Overflows in several MIME headers affect a large number of electronic mail clients. Description A variety of electronic mail clients circa 1998 are vulnerable to buffer overflow attacks in the code that processes MIME headers. See the vendor statements referenced below for details...
CVE-1999-0926
Technical details beyond the minimal description are not publicly provided in the supplied documents. Monitor for updates on affected products, versions, and fixes.
CVE-1999-0926
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers...
CVE-1999-0926: Undefined Security Weakness
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers...
Большая дырка в Outlook Express (E-mail execution)
Можно заставить Outlook Express выполнить файл прикрепленный к письму указав тип MIME подразумевающий его немедленное открытие например поточное видео. Кроме того, имеются переполнения буфера. Имя файла обрезается до определенной позиции, что позволяет обойти защиту, используя безопасное...
[SNS Advisory No.32] w3m malformed MIME header Buffer Overflow Vulnerability
----------------------------------------------------------------------- SNS Advisory No.32 w3m malformed MIME header Buffer Overflow Vulnerability Problem first discovered: Thu, 25 May 2001 Published: Wed, 19 Jun 2001 Last Updated: Wed, 19 Jun 2001...
Переполнение буфера в w3m (buffer overflow)
переполнение буфера при разборе MIME-заголовков ответа сервера...
W3M 0.10.2 - Malformed MIME Header Buffer Overflow
W3M 0.10.2 - Malformed MIME Header Buffer Overflow source: https://www.securityfocus.com/bid/2895/info W3M is a pager/text-based WWW browser similiar to lynx. A buffer overflow vulnerability exists in the 'w3m' client program. The overflow occurs when a base64-encoded string exceeding approximate...
W3M 0.1/0.2 - Malformed MIME Header Buffer Overflow
source: https://www.securityfocus.com/bid/2895/info W3M is a pager/text-based WWW browser similiar to lynx. A buffer overflow vulnerability exists in the 'w3m' client program. The overflow occurs when a base64-encoded string exceeding approximately 32 characters in length is received in a MIME...
CVE-2001-0154
CVE-2001-0154 affects Microsoft Internet Explorer 5.5 and earlier when rendering HTML and processing MIME parts. The vulnerability arises from a MIME handling table that can cause the browser to execute an embedded attachment if a malicious MIME type is set, without user confirmation. This can al...
CVE-2001-0154
HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly...
CVE-2001-0154: Undefined Security Weakness
HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly...
CVE-2001-0154
HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly...
CVE-2001-0173
Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header...
Advisory CA-2001-06
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-06 Automatic Execution of Embedded MIME Types Original release date: April 03, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected All versions of Microsoft Internet...
Incorrect MIME Header Can Cause IE to Execute E-mail Attachment
Hi, Microsoft has released a security bulletin http://www.microsoft.com/technet/security/bulletin/ms01-020.asp entitled "Incorrect MIME Header Can Cause IE to Execute E-mail Attachment". EML files are MIME multipart files that IE 5 will parse. There is a vulnerability allowing arbitrary code...
Certain MIME types can cause Internet Explorer to execute arbitrary code when rendering HTML
Overview A vulnerability exists in Microsoft Internet Explorer that allows a malicious agent to execute arbitrary code when parsing MIME parts in a document. Any user or program that uses vulnerable versions of Internet Explorer to render HTML in a document for example, when browsing a filesystem...
Security Bulletin MS01-020
Title: Incorrect MIME Header Can Cause IE to Execute E-mail Attachment Date: 29 March 2001 Software: Microsoft Internet Explorer Impact: Run code of attacker's choice. Bulletin: MS01-020 Microsoft encourages customers to review the Security Bulletin at:...