Microsoft Security Bulletin MS06-006 Vulnerability in Windows Media Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code Execution (911564)

Microsoft Security Bulletin MS06-006 Vulnerability in Windows Media Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code Execution 911564 Published: February 14, 2006 Version: 1.0 Summary Who should read this document: Customers who use a Microsoft Windows Media Player...

CVE-2006-0634

Borland C++Builder 6 BCB6 with Update Pack 4 Enterprise edition entupd4 evaluates the "isizeofint" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers...

Integer overflow

Borland C++Builder 6 BCB6 with Update Pack 4 Enterprise edition entupd4 evaluates the "isizeofint" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers...

CVE-2006-0634

CVE-2006-0634 — The provided materials identify Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise (ent_upd4) as affected. The root cause described is that evaluating the expression i > sizeof(int) yields false when i equals -1, which could introduce integer overflow vulnerabilities in ...

CVE-2006-0634

Borland C++Builder 6 BCB6 with Update Pack 4 Enterprise edition entupd4 evaluates the "isizeofint" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers...

Microsoft Windows privilege escalation vulnerability

Overview Microsoft Windows access controls may be improperly configured potentially allowing a local attacker to gain elevated privileges on a vulnerable system. Description Microsoft Windows provides numerous, fine grained permissions and privileges to control access to Windows components, such ...

Immunity Canvas: VSPLOIT_EXCHANGEPOP3

Name| vsploitexchangepop3 ---|--- CVE| CVE-2006-0537 Exploit Pack| CANVAS Description| Exchange pop3 rcpt to overflow Notes| CVE Name: CVE-2006-0537 VENDOR: Kinesphere Repeatability: References: http://www.morx.org/adv.txt CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0537...

CVE-2005-4679

This CVE affects Internet Explorer 6 for Windows XP SP2 . The vulnerability allows remote attackers to spoof the URL in the status bar by abusing the title attribute of an image linked to a trusted site within a form, leading to potential user deception. The description does not specify affected ...

CVE-2005-4679

Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site...

Immunity Canvas: SAMIFTP

Name| samiftp ---|--- CVE| CVE-2006-0441 Exploit Pack| CANVAS Description| samiftp Notes| CVE Name: CVE-2006-0441 VENDOR: Karjasoft URL: http://www.securitynull.com/advisories/secnull-11-14-2005-0x2.txt Repeatability: This exploit is non repeatable... CVE Url:...

WinRAR 3.30 - 'Filename' Local Buffer Overflow (2)

/ IHS public source code WinRAR 3.3.0 and below local BOF exploit author : c0d3r , kaveh razavi advisory : http://www.securityfocus.com/archive/1/420679 tnx to alpha who reported the vulnerability workaround: use the lastest version special tnx to LorD and NT of IHS my workmates and best friends...

Immunity Canvas: WMF_SETABORT

Name| wmfsetabort ---|--- CVE| CVE-2005-4560 Exploit Pack| CANVAS Description| WMF SetAbort MS06-001 Notes| CVE Name: CVE-2005-4560 VENDOR: Microsoft MSADV: MS06-001 Repeatability: Infinite MSRC: http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx CVE Url:...

security flaw

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via 1 a negative offset value to the shmopwrite function, 2 an "integer overflow/underflow" in the pack function, or 3 an "integer...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

Multiple Vendor BIOS - Keyboard Buffer Password Persistence 2 // source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

Multiple Vendor BIOS - Keyboard Buffer Password Persistence 1 source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on th...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memory...

MS Windows MSDTC Service Remote Memory Modification PoC (MS05-051)

No description provided by source. / \ MSDTC remote PoC exploit / by Darkeagle \ / \ Unl0ck Research Team / \ / Greetingz: all UKT boys, 0x557 guys, Sowhat, GHC/RST guys \ / Exploit tested on: Windows 2000 Professional Russian Service Pack 4 \ / http://exploiterz.org || http://55k7.org \ /...

CVE-2005-3568

The CVE-2005-3568 issue affects IBM DB2 Content Manager prior to 8.2 Fix Pack 10, where the db2fmp process can enter a CPU-intensive loop (DoS) when importing a corrupted Microsoft Excel file. The underlying cause is a corrupted Excel file triggering text search processing to loop. Impact is Deni...

[SA17388] IBM DB2 Content Manager Potential Denial of Service Vulnerabilities

TITLE: IBM DB2 Content Manager Potential Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA17388 VERIFY ADVISORY: http://secunia.com/advisories/17388/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: DB2 Content Manager 8.x http://secunia.com/product/6083/ DESCRIPTION: Some...

WebLogic management servlet

The remote web server is WebLogic An internal management servlet which does not properly check user credential can be accessed from outside, allowing a cracker to change user passwords, and even upload or download any file on the remote server. In addition to this, there is a flaw in WebLogic 7.0...