CVE-2006-6728

CVE-2006-6728 describes an unspecified vulnerability in the info request mechanism of LAN Messenger prior to 1.5.1.2. The flaw allows remote attackers to cause a denial of service (application crash) or to transmit spam via unspecified vectors. Documents consistently cite the same description acr...

CVE-2006-6728

Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service application crash or transmit spam via unspecified vectors...

雅虎通YMailAttach ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID: 21607 雅虎通是一款非常流行的即时通讯工具。 雅虎通的ymmapi.dll文件所提供的YMailAttach ActiveX控件中存在缓冲区溢出，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果用户受骗浏览了恶意的HTML文档的话，就会触发这个溢出，导致执行任意指令或导致Internet Explorer崩溃 Yahoo! Messenger = 8.0.0.863 sebug临时解决方法： 在IE中禁用YMailAttach ActiveX控件。将以下文本保存为.REG文件并导入： Windows Registry Editor Version 5....

CVE-2006-6603

Buffer overflow in the YMMAPI.YMailAttach ActiveX control ymmapi.dll before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information...

CVE-2006-6603

CVE-2006-6603 is a buffer overflow in Yahoo! Messenger’s YMMAPI.YMailAttach ActiveX control (ymmapi.dll). A crafted HTML document could trigger code execution with the user’s privileges. The vulnerability affects Yahoo! Messenger prior to version 2005.1.1.4; Yahoo’s security update fixes versions...

CVE-2006-6603

Buffer overflow in the YMMAPI.YMailAttach ActiveX control ymmapi.dll before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information...

Yahoo! Messenger YMMAPI.YMailAttach ActiveX (ymmapi.dll) Overflow

The remote host contains a version of the 'YMailAttach' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host reportedly has an unspecified buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web...

Yahoo Messenger YMailAttach ActiveX control buffer overflow

Overview The Yahoo Messenger YMailAttach ActiveX control contains a buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo Messenger is an instant messaging application. Yahoo Messenger includes several ActiveX...

Microsoft Windows图形设备接口附加库拒绝服务

No description provided by source. !/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to...

Yahoo! Messenger远程搜索字符串任意浏览导航漏洞

Yahoo! Messenger是一款流行的即时通信软件。 Yahoo! Messenger不正确处理恶意消息，远程攻击者可以利用漏洞在目标用户浏览器上打开浏览器窗口到任意页面。 发送如下私有消息给目标用户： :+-%/?=/;@$@;+?/?@@-?@+@;?msg:---------------------------------------------embed onload=window.open'http:\\google.com/'helomsg...

CVE-2006-6252

Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...

CVE-2006-6252

Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...

CVE-2006-6252

Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...

CVE-2006-6252

CVE-2006-6252 affects Microsoft Windows Live Messenger 8.0 and earlier. When gestual emoticons are enabled, a remote attacker can cause denial of service by sending a long string of ":D" sequences that are interpreted as emoticons, consuming CPU resources. The NVD entry notes a network-exposed ve...

Block MSN Messenger Live 8

Windows Live Messenger, formerly and still commonly known as MSN Messenger or MSN, is a freeware instant messaging client for Windows XP and Windows Vista. It is part of Microsoft's Windows Live set of online services.Released on June 19, 2006, MSN Messenger Live 8 has many features including...

CVE-2006-5653

Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...

CVE-2006-5653

Sun Java System Messenger Express 6 is affected by a cross-site scripting (XSS) vulnerability in the errorHTML function of the index script, exploitable via the error parameter. The issue enables remote injection of script/HTML and is cataloged as CVE-2006-5653 with a MEDIUM impact (PARTIAL integ...

Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...

SystemMessenger_xss.txt

------=Part15425083137.1162268411579 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sun java System Messenger Express remote XSS vulnerabilities By: Handrix 29 November 2006 MorX security research team www.morx.org...

Sun Java System 6.x - Messenger Express Cross-Site Scripting

Sun Java System 6.x - Messenger Express Cross-Site Scripting source: https://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage thi...