2383 matches found
Mibew Messenger 1.6.4 Cross Site Scripting
Advisory ID: CSA-12001 Title: Mibew messenger multiple XSS Product: mibew messenger Version: 1.6.4 and probably prior Vendor: mibew.org Vulnerability type: XSS Vendor notification: 2012-01-07 Public disclosure: 2012-01-24 Mibew messenger version 1.6.4 an probably below is vulnerable to multiple X...
CVE-2011-4697
The Xiaomi MiTalk Messenger com.xiaomi.channel application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application...
Design/Logic Flaw
The Xiaomi MiTalk Messenger com.xiaomi.channel application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application...
CVE-2011-4697
The Xiaomi MiTalk Messenger Android app (com.xiaomi.channel) is affected by CVE-2011-4697 in versions before 2.1.320 due to insufficient data protection, allowing a remote attacker using a crafted app to read or modify messaging information. A vendor patch is available; users should upgrade to th...
CVE-2011-4697
The Xiaomi MiTalk Messenger com.xiaomi.channel application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application...
Yahoo Messenger JPG Photo Sharing Integer Overflow Vulnerability
Yahoo! Messenger is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Yahoo Messenger JPG Photo Sharing Integer Overflow Vulnerability
This host is installed with Yahoo! Messenger and is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbyahoomsgcyimagebofvuln.nasl 6018 2017-04-24 09:02:24Z teissa $ Yahoo Messenger JPG Photo Sharing Integer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright ...
Integer overflow
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow...
CVE-2012-0268
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow...
CVE-2012-0268
CVE-2012-0268 describes an integer overflow in Yahoo! Messenger’s YImage.dll CYImage::LoadJPG when photo sharing is enabled, leading to a heap-based buffer overflow that could allow remote code execution via a crafted JPG. Affected are Yahoo! Messenger versions up to and including 11.5.0.155 (old...
CVE-2012-0268
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow...
Yahoo Messenger ".jpg"文件处理缓冲区溢出漏洞
BUGTRAQ ID: 51405 CVE ID: CVE-2012-0268 Yahoo! Messenger是一款流行的即时通信软件。 Yahoo! Messenger在实现上存在安全漏洞，可被恶意用户利用控制用户系统。 此漏洞源于在分配使用图形尺寸值的内存时，"CYImage::LoadJPG"方法YImage.dll中存在整数溢出漏洞，可通过特制的JPG文件造成堆缓冲区溢出。 0 Yahoo! Messenger 11.x 厂商补丁： Yahoo! ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://messenger.yahoo.co...
EFF Warns Users About Privacy Issues With New AIM Chat Client
Privacy experts at the EFF are warning users not to upgrade to the new version of the venerable AOL Instant Messenger chat client because of some serious privacy concerns with the application. The main concern is that the new version of AIM automatically logs all user conversations by default, bu...
Mandriva Update for libmsn MDVA-2011:081-1 (libmsn)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-3179
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command...
Command injection
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command...
CVE-2011-3179
CVE-2011-3179 affects Novell Messenger Server (formerly GroupWise Messenger): versions 2.1 and 2.2.x prior to 2.2.1, and GroupWise Messenger 2.04 and earlier, are vulnerable to an information-disclosure flaw that allows a remote attacker to read arbitrary memory locations via a crafted command. T...
CVE-2011-3179
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command...
Yahoo Messenger Exploit Changes Status Messages
Security researchers at BitDefender are warning users about a new Yahoo! Messenger vulnerability that allows an attacker to change victims’ status updates. According to the security firm, the situation has been exploited in the wild to target version 11.x of the Messenger client. The vulnerabilit...