1892 matches found
CVE-2010-0161
The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service heap memory corruption and applicatio...
Mozilla Thunderbird多个拒绝服务漏洞
BUGTRAQ ID: 38831 CVECAN ID: CVE-2010-0161,CVE-2010-0163 Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 如果将Thunderbird客户端配置为使用calmail.berkeley.edu（在这种情况下会对SSL/TLS连接广播 AUTH=GSSAPI），运行在Vista或Windows 7平台上的Thunderbird在加入到AD期间试图使用SSPI时就会崩溃。默认下Thunderbird 2在SMTP期间总会试图使用SSPI。...
CVE-2010-0161
CVE-2010-0161 affects Thunderbird (before 2.0.0.24) and SeaMonkey (before 1.1.19) on Windows, where the nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp can be triggered by data from a remote SMTP/IMAP/POP server using SSPI. This may cause heap memory corruption and application crash...
CVE-2010-0161
The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service heap memory corruption and applicatio...
IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)
Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...
Bank Trojan Annoys Users With Pop Ups
Researchers recently came face to face with a Trojan with an aggressive modus operandi – it continually forces you to update your banking credentials with irritating pop up windows. Read the full article. Help Net Security...
IBM Lotus Notes Attachment Viewer UUE File Handling Buffer Overflow (CVE-2005-2618)
Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over the SMTP, POP and IMAP protocols. There exists a buffer overflow vulnerability in IBM Lotus Notes Attachment Viewer...
Use-after-free crash in HTML parser — Mozilla
Security researcher Alin Rad Pop of Secunia Research reported that the HTML parser incorrectly freed used memory when insufficient space was available to process remaining input. Under such circumstances, memory occupied by in-use objects was freed and could later be filled with attacker-controll...
CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL)
|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |------------------------------------------------- EIP Hunters...
Deepburner Pro version 1.9.0.228 dbr file universal buffer overflow exploit
No description provided by source. / Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from:...
Google Chrome memory corruption
Use-after-free on blocked pop-up windows processing...
Google Chrome < 4.0.249.78 Multiple Vulnerabilities
Binary data 5328.pasl...
Secunia Research: Google Chrome Pop-Up Block Menu Handling Vulnerability
====================================================================== Secunia Research 26/01/2010 - Google Chrome Pop-Up Block Menu Handling Vulnerability - ====================================================================== Table of Contents Affected...
Google Chrome < 4.0.249.78 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 4.0.249.78. Such versions are reportedly affected by multiple vulnerabilities : - A pop-up blocker bypass. Issue 3275 - Cross-domain theft due to CSS design error. Issue 9877 - Browser memory error with stale pop-up block...
Secunia Research: HP Power Manager "formExportDataLogs" Directory Traversal
====================================================================== Secunia Research 20/01/2009 - HP Power Manager "formExportDataLogs" Directory Traversal - ====================================================================== Table of Contents Affected...
Xenorate 2.50(.xpl) universal Local Buffer Overflow Exploit (SEH)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Xenorate 2.50.xpl...
Media Jukebox 8.0.400 Buffer Overflow Exploit (SEH)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Media Jukebox...
Quick Player 1.2 Unicode Buffer Overflow
!/usr/bin/python Vulnerability : Quick Player v1.2 unicode buffer overflow exploit coded by : mrme reference : http://www.exploit-db.com/exploits/10759 corelanc0d3r Tested on : XP SP3 En VirtualBox Greetz to : Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT mrme@backtrack:$ nc -lvp...
Browser Attacks Continue to Evolve
While the security teams at Microsoft, Mozilla and the other browser vendors continue to work on new defenses and exploit mitigations, the state of the art in attacks is continuing to evolve. Security researcher Robert Hansen recently pointed out a new technique that could be used for a twist on...
E-Pay RFI Vulnerability
Exploit for unknown platform in category web applications ======================= E-Pay RFI Vulnerability ======================= ======================================================================================== | Title : E-Pay RFI Vulnerability | | Author : indoushka | | Script : e-pay...