2383 matches found
CVE-2007-5017
CVE-2007-5017 describes an absolute path traversal vulnerability in a specific ActiveX control (the CYFT object in ft60.dll) used by Yahoo! Messenger 8.1.0.421. An attacker could supply a full pathname to the GetFile method to force a download or create/overwrite arbitrary files on the affected s...
CVE-2007-5017
Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method...
yim-download.txt
----------------------------------------------------------------------------- Yahoo! Messenger 8.1.0.421 CYFT Object ft60.dll Arbitrary File Download url: http://download.yahoo.com/dl/msgr8/us/ymsgr8us.exe Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was...
Yahoo! Messenger 8.1.0.421 CYFT Object Arbitrary File Download
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bYahoo! Messenger 8.1.0.421 CYFT Object ft60.dll Arbitrary File Download/b...
Yahoo! Messenger 8.1.0.421 - CYFT Object Arbitrary File Download
Yahoo! Messenger 8.1.0.421 - CYFT Object Arbitrary File Download ----------------------------------------------------------------------------- Yahoo! Messenger 8.1.0.421 CYFT Object ft60.dll Arbitrary File Download url: http://download.yahoo.com/dl/msgr8/us/ymsgr8us.exe Author: shinnai mail:...
Yahoo! Messenger 8.1.0.421 CYFT Object Arbitrary File Download
Exploit for unknown platform in category remote exploits ============================================================== Yahoo! Messenger 8.1.0.421 CYFT Object Arbitrary File Download ==============================================================...
Yahoo! Messenger 8.1.0.421 - CYFT Object Arbitrary File Download
----------------------------------------------------------------------------- Yahoo! Messenger 8.1.0.421 CYFT Object ft60.dll Arbitrary File Download url: http://download.yahoo.com/dl/msgr8/us/ymsgr8us.exe Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was...
Hardcoded credentials
The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected...
CVE-2007-4901
The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected...
CVE-2007-4901
Affected software: AOL Instant Messenger (AIM) family on Windows (AIM 6.1.41.2, 6.2.32.1; AIM Pro; AIM Lite). Component/causal issue: embedded Internet Explorer server control (mshtml.dll) used to render HTML in instant messages, with insufficient input sanitization of inbound HTML content. Impac...
CVE-2007-4901
The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected...
AOL Instant Messenger <= 6.1.41.2 Control Notification Window Script Injection
Binary data 4215.prm...
AIM Arbitrary HTML Display in Notification Window
Arbitrary HTML can be readily displayed in notification windows generated by AOL Instant Messenger when the window of origin is not the main focus. This vulnerability is known to be present at least in version 6.1.41.2 which is the current release. It appears to display any form of HTML-compliant...
AOL Instant Messenger alerts spoofing
No description provided...
MSN Messenger视频对话堆溢出漏洞(MS07-054)
BUGTRAQ ID: 25461 CVECAN ID: CVE-2007-2931 MSN Messenger是微软发布的非常流行的即时通讯聊天工具。 MSN VIDEO处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 MSN VIDEO的协议分为两个大部分：webcam和video conversation，其中webcam带有一个9个字节的头： （UDP header）9d 49 e1 8e 4a 09 be 09 0a payload 第1、2个字节代表payload长度（0x499d & 2047 = 413），后面的payload长度就为413了。...
Microsoft MSN Messenger / Windows Live Messenger memory corruption
Memory corruption on Webcam or Video Chat session establishment...
Microsoft MSN Messenger and Windows Live Messenger Remote Code Execution Vulnerability (942099) (deprecated)
Binary data 4211.prm...
Microsoft MSN Messenger and Windows Live Messenger Remote Code Execution Vulnerability (942099) (deprecated)
Binary data 4210.prm...
Microsoft Security Bulletin MS07-054 - Important Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution (942099)
Microsoft Security Bulletin MS07-054 - Important Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution 942099 Published: September 11, 2007 Version: 1.0 General Information Executive Summary This important security update resolves a publicly disclosed...
MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution (942099)
The remote host is running MSN Messenger or Windows Live Messenger. The version of Messenger used on the remote host is vulnerable to a remote buffer overflow in the way it handles webcam and video chat sessions. An attacker may exploit this vulnerability to execute arbitrary code on the remote...