8003 matches found
Microsoft Internet Explorer 5/6 - Cached Objects Zone Bypass
source: https://www.securityfocus.com/bid/6028/info Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with Service Pack 1 and Internet Explorer 5 with Service Pack 2 a...
File deletion via Windows XP Help Center
By usgin hcp:// URL it's possible to remove file sustem objects...
Code execution via Microsoft Office XP
It's possible to include scripting object which fill be activated in case user reply or forward e-mail message. Host method of spreadsheet object allows creation and execution of arbitrary files...
Microsoft Internet Explorer 5/6 - Self-Referential Object Denial of Service
source: https://www.securityfocus.com/bid/4564/info Microsoft Internet Explorer is vulnerable to a denial of service due to an error in handling certain self-referential definitions in HTML documents. This occurs when an object of type "text/html" is specified, with the DATA field referencing the...
Локальный DoS против Windows NT (mutex)
Пользователь может захватить все mutex-объекты, после чего другие приложения не смогут работать с сетью...
Borland/Inprise Interbase SQL database server contains backdoor superuser account with known password
Overview Description Interbase is an open source database package that is distributed by Borland/Inprise. The server contains a compiled-in backdoor account with a known password.In the following interbase code, references are made about a LOCKSMITH user: ./jrd/dyn.e ./jrd/isc.c ./jrd/jrd.c...
Утечка информации в Novell Netware (Object enumeration)
Сервера Netware с поддержкой TCP/IP сообщают информацию об объектах NDS через анонимное соединение TCP/524...
Microsoft Virtual Machine 2000/3100/3200/3300 Series - 'com.ms.activeX.ActiveXComponent' Arbitrary Program Execution
source: https://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsoft Internet Explorer or Outlook. Th...
Пользователь может обойти Inherited Rights Filters (IRF) в Novell Netware
Права на избранные свойства Selected Property Rights в Novell Netware могут наследоваться, но не могут быть блокированы с помощью IRF. Таким образом пользователь, имеющий права на родительский объект может овладеть дочерним объектом NDS, установив права на родительский объект и объявив их...
Очередная уязвимость IE при работе с объектами Office
Создавая ActiveX-объекты для файлов .xla, .ppt, .mdb можно получить доступ к методу SaveAs, сохранить любой файл локально и запустить его на выполнение...
wordpad-ie.txt
Georgi Guninski security advisory 7, 2000 Wordpad vulnerability, exploitable also in IE for Win9x Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for an...
ie50.xml.txt
Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...
CVE-1999-1204
Check Point Firewall-1 does not properly handle certain restricted keywords e.g., Mail, auth, time in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator...
PT-2010-5675 · Gnu +1 · Glibc +1
Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.11.3 glibc versions 2.12.x prior to 2.12.2 Description: The issue is related to the improper restriction of the use of the LD AUDIT environment variable to reference dynamic shared objects DSOs as audit objects. This...
Unguarded calls to __toString() when nesting an object into an array
More info at https://symfony.com/blog/cve-2024-51754-unguarded-calls-to-tostring-in-a-sandbox-when-an-object-is-in-an-array-or-an-argument-list...
Security Update for Windows Server 2003 (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...
Security Update for Windows Server 2003 x64 Edition (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...
Security update 1970-01-01
...
Security Update for Windows 2000 (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...
Security Update for Windows Server 2003 64-bit Itanium Edition (KB901017)
A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...