2721 matches found
CVE-2007-0879
CVE-2007-0879 describes a buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 that allows a user‑assisted remote attacker to execute arbitrary code via certain PE-format executable files . The underlying cause is a buffer overflow in processing PE files, leading to potential compromise ...
CVE-2007-0879
Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrary code via certain executable files in PE format. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-6997
The CVE-2006-6997 entry concerns an unspecified vulnerability in a cryptographic feature of MailEnable, resulting in weakened authentication security. Affected versions are MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21. The descripti...
CVE-2007-0565
CGI-Rescue Shopping Basket Professional 7.50 and earlier allows remote attackers to inject arbitrary operating system commands via unspecified vectors...
CVE-2006-6964
MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source...
CVE-2006-6964
MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source...
CVE-2006-6964
MailEnable Professional prior to v1.78 contains an information disclosure vulnerability: when an administrator edits a user’s settings, a cleartext user password is exposed in the HTML source. This allows remote authenticated administrators to obtain sensitive information. The affected product/co...
WS_FTP 2007 Professional SCP handling format string vulnerability
Synopsis: WSFTP 2007 Professional SCP handling format string vulnerability Product: WSFTP 2007 Professional Vendor: Ipswitch I. Background "..Transfer files anywhere, anytime, with complete security. Lightning fast transfer speeds Industry leading security Time saving features include schedule,...
Microsoft Windows Explorer - .AVI File Denial of Service
Microsoft Windows Explorer - .AVI File Denial of Service print "-----------------------------------------------------------------------------------" print "Explorer.exe version 6.0.2900.2180 .avi file Denial of Service" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...
MS Windows Explorer (AVI) Unspecified Denial of Service Exploit
Exploit for unknown platform in category dos / poc =============================================================== MS Windows Explorer AVI Unspecified Denial of Service Exploit =============================================================== print...
Format string
Format string vulnerability in the log creation functionality of BitDefender Client Professional Plus 8.02 allows attackers to execute arbitrary code via certain scan job settings...
CVE-2007-0391
BitDefender Client Professional Plus 8.02 is affected by a format-string vulnerability in the log-creation functionality. An attacker could leverage this flaw via certain scan job settings to execute arbitrary code or take control of the affected system. The description and references across NVD/...
BrowseDialog Class (ccrpbds6.dll) Internet Explorer Denial of Service
No description provided by source. !-- ----------------------------------------------------------------------------------------------------------- BrowseDialog Class ccrpbds6.dll Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org...
DivX Player 6.4.1 - DivXBrowserPlugin npdivx32.dll IE Denial of Service
DivX Player 6.4.1 - DivXBrowserPlugin npdivx32.dll IE Denial of Service DivXBrowserPlugin.GoWindowed milw0rm.com 2007-01-19...
Buffer overflow
Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WSFTP 2007 Professional allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long ftp:// URL in an HTML document, and possibly other vectors...
WFTPD Server SITE ADMIN命令远程拒绝服务漏洞
WFTPD Server是一款FTP服务程序。 WFTPD Server处理SITE ADMIN命令存在问题,远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交恶意字符串作为SITE ADMIN命令参数,可导致应用程序崩溃,造成拒绝服务攻击。 Texas Imperial Software WFTPD Pro 3.21 R2 Texas Imperial Software WFTPD Pro 3.21 R3 Texas Imperial Software WFTPD Pro 3.21 R1 Texas Imperial Software WFTPD Pro 3.21 Texas...
BrowseDialog Class ccrpbds6.dll Internet Explorer 7 - Denial of Service
BrowseDialog Class ccrpbds6.dll Internet Explorer 7 - Denial of Service argCount = 1 arg1=String2000000, "A" CCRPBDc.SelectedFolder = arg1 document.location.reload milw0rm.com 2007-01-18...
Ipswitch WS_FTP 2007 Professional WSFTPURL.EXE本地内容破坏漏洞
Ipswitch WSFTP 2007 Professional是一款FTP客户程序。 Ipswitch WSFTP包含的wsbho2k0.dll存在内容破坏问题,本地攻击者可以利用漏洞以影响内核进程权限执行任意指令。 提交超长字符串作为wsftpurl.exe参数数据,可导致缓冲区溢出,精心构建提交数据,可能导致特权提升。 Ipswitch WS FTP Server Professional 2007 目前没有解决方案提供: http://www.ipswitch.com/products/wsftp/home/index.asp / Copyright 2006 c LMH...
BrowseDialog Class 'ccrpbds6.dll' Internet Explorer 7 - Denial of Service
argCount = 1 arg1=String2000000, "A" CCRPBDc.SelectedFolder = arg1 document.location.reload milw0rm.com 2007-01-18...
CCRP Folder Treeview Control (ccrpftv6.ocx) IE Denial of Service Exploit
Exploit for unknown platform in category dos / poc ======================================================================== CCRP Folder Treeview Control ccrpftv6.ocx IE Denial of Service Exploit ======================================================================== argCount = 1...