Creative Software AutoUpdate Engine - ActiveX Stack Overflow

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

CVE-2008-0211

CVE-2008-0211 affects HP Compaq Business Notebook PC BIOS F.04–F.11. Local users may cause a DoS via unspecified vectors. The security bulletin HP-SSRT-080004 (HPSBGN02305) lists affected BIOS versions and corresponding updates across multiple notebook series (e.g., 2210, 2510, 2710, 6510/6710/67...

[security bulletin] HPSBGN02305 SSRT080004 rev.1 - HP Compaq Business Notebook PC BIOS, Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01327854 Version: 1 HPSBGN02305 SSRT080004 rev.1 - HP Compaq Business Notebook PC BIOS, Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon ...

[security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01393763 Version: 1 HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

hp-activex.txt

Advisory: ///////// There is another remotely exploitable flaw within software preinstalled in HP notebook machines. This time, the culprit is automatic software update tool provided by the vendor.The Potential exploitation may lead to user files loss or altering vital system files e.g. kernel,...

HP Software Update Client 3.0.8.4 - Multiple Vulnerabilities

HP Software Update Client 3.0.8.4 - Multiple Vulnerabilities Advisory: ///////// There is another remotely exploitable flaw within software preinstalled in HP notebook machines. This time, the culprit is automatic software update tool provided by the vendor.The Potential exploitation may lead to...

HP notebooks remote code execution vulnerability (multiple series)

Advisory: ///////// Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access. Overview: ///////// Software called "HP Info...

[security bulletin] HPSBPI02226 SSRT061274 rev.1 - HP Help and Support Center Running on HP Notebook Computers Running with Windows XP, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01077085 Version: 1 HPSBPI02226 SSRT061274 rev.1 - HP Help and Support Center Running on HP Notebook Computers Running with Windows XP, Remote Unauthorized Access NOTICE: The information in this...

CVE-2006-6121

Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method...

CVE-2006-6121

CVE-2006-6121 affects the Acer LunchApp.APlunch ActiveX control (LunchApp.ocx) shipped with notebooks. The Run() method allows an attacker to execute arbitrary commands on a vulnerable system when a page hosts the control, enabling remote code execution with the user’s privileges. Public document...

CVE-2006-6121

Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method...

CVE-2006-5882

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field...

CVE-2006-5882

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field...

CVE-2002-1969

Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service crash via an invalid username during login...

CVE-2002-1969

Technical details about CVE-2002-1969 are not publicly available in the provided documents. No concrete exploit, affected versions, or remediation are disclosed here; monitor for updates.

CVE-2002-1969

Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service crash via an invalid username during login...

Security update 1970-01-01

...

Security update 1970-01-01

...

Security update 1970-01-01

...