2383 matches found
Stack overflow
Multiple stack-based buffer overflows in Novell GroupWise Messenger GWIM Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NMASZTRANSACTIONID field name...
CVE-2008-2704
Novell GroupWise Messenger GWIM before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service crash via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries...
CVE-2008-2703
Summary (CVE-2008-2703) : A stack-based buffer overflow in Novell GroupWise Messenger Client for Windows (pre-2.0.3 HP1) allows remote code execution via crafted HTTP responses. The overflow is triggered by spoofed server responses that place a long string after the NM_A_SZ_TRANSACTION_ID field n...
CVE-2008-2704
The CVE concerns Novell GroupWise Messenger (GWIM) Client prior to Version 2.0.3 Hot Patch 1, where a long user ID (or crafted server responses) can cause a remote crash (DoS). The issue originates from GWIM’s handling of long IDs and/or certain server responses, and is documented as potentially ...
CVE-2008-2703
Multiple stack-based buffer overflows in Novell GroupWise Messenger GWIM Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server responses" that contain a long string after the NMASZTRANSACTIONID field name...
CVE-2008-2704
Novell GroupWise Messenger GWIM before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service crash via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries...
Novell GroupWise Messenger客户端远程栈溢出漏洞
BUGTRAQ ID: 29602 Novell GroupWise Messenger是一款基于GroupWise平台的即时交流工具。 GroupWise Messenger客户端在处理服务端的回应数据时存在漏洞，如果恶意的服务器向GroupWise Messenger客户端请求回复了特制响应的话，就可能触发栈溢出，导致执行任意指令。 Novell GroupWise Messenger 2.0.3 Novell GroupWise Messenger 2.0 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Novell GroupWise Messenger Client < 2.0.3 HP1 Multiple Remote Overflows
The remote host is running GroupWise Messenger Client from Novell. The installed version is affected by multiple buffer overflow vulnerabilities. By sending specially crafted spoofed server responses to valid client requests, it may be possible to execute arbitrary code within the context of the...
BackWeb Lite Install Runner ActiveX stack buffer overflows
Overview The BackWeb Lite Install Runner ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description BackWeb Lite Install Runner is an ActiveX control that is used to install software on...
MSN Messenger UIAutomation ActiveX Control Information Disclosure (MS08-050; CVE-2008-0082)
Windows Messenger, MSN Messenger, and Windows Live Messenger are popular instant messaging clients for Microsoft Windows. An information disclosure vulnerability exists in Windows Messenger, MSN Messenger, and Windows Live Messenger. The vulnerability is caused by an ActiveX control that is marke...
C6 Messenger下载Url DownloaderActiveX控件远程代码执行漏洞
C6 Messenger是由意大利电信提供的即时聊天程序。 C6 Messenger所安装的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 用户可从 http://c6.community.alice.it/download/c6.html 下载并安装C6...
Cisco PIX / ASA multiple security vulnerabilities
TCP ACKs DoS, TLS DoS, instant messenger DoS, HTTPs request parsing DoS, Control-plane ACLs feature bypass...
Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Document ID: 105444 Advisory ID: cisco-sa-20080604-asa http://www.cisco.com/warp/public/707/cisco-sa-20080604-asa.shtml Revision 1.0 For Public Release 2008 June 04 1600 UTC...
MS Windows Messenger Service Remote Exploit FR (MS03-043)
No description provided by source. // / Crpt MS03-043 - Messenger exploit by MrNice Crpt / / --------------------------------------------------------------- / / / /  ...
CVE-2008-2551
The DownloaderActiveX Control DownloaderActiveX.ocx in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."...
Code injection
The DownloaderActiveX Control DownloaderActiveX.ocx in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."...
CVE-2008-2551
CVE-2008-2551 – Icona SpA C6 Messenger DownloaderActiveX control : The DownloaderActiveX.ocx in C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in propDownloadUrl when propPostDownloadAction is set to “run.” This is a remote code execu...
C6 Messenger Installation Url Downloader ActiveX code execution
It's possible to download and execute file. Vulnerability is used in-the-wild for hidden trojan code installation...
[NSG 03-06-2008] C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit
!-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ exploit url: http://retrogod.altervista.org/9sgc6downloadexec.html "C6 Messenger is an instant messaging program produced by...
C6 Messenger ActiveX Remote Download & Execute Exploit
No description provided by source. !-- C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ "C6 Messenger is an instant messaging program produced by Telecom Italia Group, specifical...