Microsoft Office Publisher Invalid Memory Reference Remote Code Execution Vulnerability

Description Microsoft Office Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a maliciously crafted Publisher file. Successful exploits may allow attackers to execute arbitrary code with privileges of the us...

Include file vulnerability details-vulnerability warning-the black bar safety net

Author: IceskYsl@1st Source: Joystiq1. S. Thttp://www.1steam.cn/ Affirmed: the original, welcome to reprint, please indicate the source rambled1. S. Thttp://www.1steam.cn/ ============= First, let's discuss the include file vulnerability,the first thing to ask is,what is"remote file inclusion...

Microsoft Windows Media Player 6.4/10.0 - MID Malformed Header Chunk Denial of Service

source: https://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected application processes this image, th...

Microsoft Windows Media Player 6.410.0 - MID Malformed Header Chunk Denial of Service

Microsoft Windows Media Player 6.410.0 - MID Malformed Header Chunk Denial of Service source: https://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', a...

simple file manager 0.24a - Multiple Vulnerabilities

/\ | flame vrs Simple File Manager | | http://onedotoh.sourceforge.net/ | | Various Vulnerbilities Including: | / /+++++++++++++++++++++++++++++++++++++++++++\ | Using the scripts supplied by the webapp: | | Reading of Arbitrary files | | Deletion of Arbitrary files | | Modification of Arbitrary...

GNU Tar 1.1x - 'GNUTYPE_NAMES' Directory Traversal

/ source: https://www.securityfocus.com/bid/21235/info GNU Tar is prone to a vulnerability that may allow an attacker to place files and overwrite files in arbitrary locations on a vulnerable computer. These issues present themselves when the application processes malicious archives. A successful...

CVE-2006-4046

Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10rc5 and earlier on Linux/BSD, allow remote attackers to execute arbitrary code via 1 a large .S3M file handled by the mpLoadS3M function, 2 a crafted .IT file handled by the...

DUMB: Heap buffer overflow

Background DUMB Dynamic Universal Music Bibliotheque is an IT, XM, S3M and MOD player library. Description Luigi Auriemma found a heap-based buffer overflow in the itreadenvelope function which reads the envelope values for volume, pan and pitch of the instruments referenced in a ".it" Impulse...

AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/18859/info The AdPlug library is affected by multiple remote buffer-overflow vulnerabilities. These issues are due to the library's failure to properly bounds-check user-supplied input before copying it into insufficiently sized memory buffers. These...

Update Protection against VWar Remote File Inclusion Vulnerability

Several vulnerabilities have been reported in Virtual War VWar due to input validation errors in several scripts. Remote attackers could exploit these vulnerabilities to include malicious files and compromise a vulnerable system...

magiciso 5.0 build 0166 - Directory Traversal

source: https://www.securityfocus.com/bid/17725/info Reportedly, an attacker can carry out attacks using directory-traversal strings. These issues occur when the application processes malicious archives. A successful attack can allow the attacker to place potentially malicious files and to...

WinHKI 1.41.51.6 - Directory Traversal

WinHKI 1.41.51.6 - Directory Traversal source: https://www.securityfocus.com/bid/17153/info Reportedly, an attacker can carry out directory-traversal attacks. These issues present themselves when the application processes malformed archives. A successful attack can allow the attacker to place...

[SA18828] SSH Tectia Server SFTP Service Unspecified Vulnerability

TITLE: SSH Tectia Server SFTP Service Unspecified Vulnerability SECUNIA ADVISORY ID: SA18828 VERIFY ADVISORY: http://secunia.com/advisories/18828/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: SSH Secure Shell for Servers 3.x http://secunia.com/product/808/ SSH...

ImageVue 0.16.1 - index.php?bgcol Cross-Site Scripting

ImageVue 0.16.1 - index.php?bgcol Cross-Site Scripting source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection...

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure

source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote attackers to upload arbitrary HTML files and script code to the application...

CVE-2005-3188

Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via 1 an m3u file containing a long line ending in .wma or 2 a pls file containing a long File1 value ending in .wma, a different vulnerability than CVE-2006-0476...

Secunia Research: Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability

====================================================================== Secunia Research 13/12/2005 Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability ====================================================================== Table of Contents Affected...

CVE-2005-2940

Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 Beta 1 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the programs 1 GIANTAntiSpywareMain.exe, 2 gcASNotice.exe, 3 gcasServ.exe, 4 gcasSWUpdater.exe, or 5...

CVE-2005-3379

Multiple interpretation error in Trend Micro 1 PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and 2 OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated...

Microsoft Windows - HTA Script Execution (MS05-016)

Microsoft Windows - HTA Script Execution MS05-016 / Changed date in db to place it on the main page instead of it being bumped off /str0ke / /++ MS05-016 POC Made By ZwelL [email protected] 2005.4.13 All information from : http://www.securityfocus.net/archive/1/395563/2005-04-10/2005-04-16/0 You nee...