2410 matches found
CVE-2006-6252
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...
Block MSN Messenger Live 8
Windows Live Messenger, formerly and still commonly known as MSN Messenger or MSN, is a freeware instant messaging client for Windows XP and Windows Vista. It is part of Microsoft's Windows Live set of online services.Released on June 19, 2006, MSN Messenger Live 8 has many features including...
CVE-2006-5653
Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...
CVE-2006-5653
Sun Java System Messenger Express 6 is affected by a cross-site scripting (XSS) vulnerability in the errorHTML function of the index script, exploitable via the error parameter. The issue enables remote injection of script/HTML and is cataloged as CVE-2006-5653 with a MEDIUM impact (PARTIAL integ...
Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...
SystemMessenger_xss.txt
------=Part15425083137.1162268411579 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sun java System Messenger Express remote XSS vulnerabilities By: Handrix 29 November 2006 MorX security research team www.morx.org...
iPlanet Messaging Server - Messenger Express Expression() HTML Injection
source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser...
Sun Java System 6.x - Messenger Express Cross-Site Scripting
source: https://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser ...
Sun Java System 6.x - Messenger Express Cross-Site Scripting
Sun Java System 6.x - Messenger Express Cross-Site Scripting source: https://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage thi...
CVE-2006-5563
Unspecified vulnerability in Yahoo! Messenger Service 18 before 8.1.0.195 allows remote attackers to cause a denial of service NULL dereference and application crash via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from...
CVE-2006-5563
CVE-2006-5563 affects Yahoo! Messenger (Service 18) before 8.1.0.195. Remote attackers can cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite. This is the only technical detail provided by the sources; no further exploit steps, affect...
CVE-2006-5563
Unspecified vulnerability in Yahoo! Messenger Service 18 before 8.1.0.195 allows remote attackers to cause a denial of service NULL dereference and application crash via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from...
雅虎通会议邀请远程拒绝服务漏洞
雅虎通是一款非常流行的即时通讯工具。 雅虎通在处理所接收到的会议邀请时存在空指针引用问题，远程攻击者可以通过发送包含有特制room name字符串的会议邀请报文导致雅虎通客户端崩溃。 Yahoo! Messenger 8.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.yahoo.com/...
Novell GroupWise Messenger fails to properly handle HTTP POST requests.
Overview Novell GroupWise Messenger fails to properly handle HTTP POST requests. This vulnerability may allow a remote attacker to cause a denial of service condition. Description Novell GroupWise Messenger fails to properly handle HTTP POST requests. This vulnerability may be triggered by sendin...
PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability
PhpBB=2.0.10 groupcp.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=666 Vulnerable Code: include$phpbbrootpath . 'includes/pageheader.'.$phpEx; ; Exploit : http://www.vicTim.com/PhpBB/groupcp.php?phpbbrootpath=shell.txt? Discoverd By :...
Debian DSA-1088-1 : centericq - buffer overflow
Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in centericq, a text-mode multi-protocol instant messenger client, which may lead local or remote attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2006-4511
Messenger Agents nmma.exe in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service crash via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."...
CVE-2006-4511
Messenger Agents nmma.exe in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service crash via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."...
CVE-2006-4511
Novell GroupWise Messenger nmma.exe servers (versions 2.0.2 and 1.0.6) are affected by a DoS vulnerability triggered by a crafted HTTP POST to TCP port 8300 with a modified val parameter. The issue is described as an invalid/null pointer dereference (zero-size strings in blowfish routines) that c...