5666 matches found
CVE-2008-4664: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control QvodInsert.dll in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. NOTE: some of these details are obtained from third party information...
CVE-2008-4652: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the ActiveX control DartFtp.dll in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property...
BOM characters, low surrogates stripped from JavaScript before execution — Mozilla
Microsoft developer Dave Reed reported that certain BOM characters are stripped from JavaScript code before it is executed. This can lead to code, which would otherwise be treated as part of a quoted string, to be executed. The issue could potentially be used by an attacker to bypass or evade...
CVE-2008-4071: Improper Input Validation
A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service browser crash via an src property value with an invalid acroie:// URL...
Code injection
Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...
CVE-2008-3488
Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...
CVE-2008-3488
Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...
CVE-2008-3488
CVE-2008-3488 affects Novell iManager prior to 2.7 SP1 (2.7.1). An unspecified remote vulnerability allows an attacker to delete Property Book Pages created with Plug-in Studio. Impact is unauthorized deletion of those pages; exploitation details are not disclosed in the provided documents. Remed...
Novell iManager < 2.7 SP1 Property Book Pages Security Bypass
Binary data 4618.prm...
CVE-2008-3488: Undefined Security Weakness
Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...
RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability
This vulnerability allows remote attackers to execute code on vulnerable installations of RealPlayer. User interaction is required in that a user must visit a malicious web site. The specific flaw exists in the rmoc3260 ActiveX control exposed through the following CLSIDs:...
Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)
No description provided by source. !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' repeats 101 times, "DCBA center" 2007-07-10 21:15:34.573 Cor...
Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC)
!/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' , "DCBA center" 2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0:...
The Microsoft Office Snapshot Viewer ActiveX Exploit-vulnerability warning-the black bar safety net
Source: http://hi.baidu.com/cloie/ Today someone made a Snapshot Viewer of the ADV, combined with the CERT that dranzer. pdf, to reproduce the vulnerability EXP: the var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/"Start"菜单 / 程序 / 启动 /test.exe'; obj...
Cross site scripting
Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a 1 location or 2 location.href property, related to incorrect determination of t...
Cross site scripting
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...
CVE-2008-2948
Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...
CVE-2008-2949
CVE-2008-2949 describes a cross-domain vulnerability in Internet Explorer 6 and 7 where the attacker could manipulate the window.location object using a String to observe events across domains. The root cause is the incorrect determination of the origin of web script, enabling potential viewing o...
Buffer overflow
Buffer overflow in the DXTTextOutEffect ActiveX control aka the Text-Effect DXT Filter, as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value...
CVE-2008-2910
Buffer overflow in the DXTTextOutEffect ActiveX control aka the Text-Effect DXT Filter, as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value...