Internet Explorer HTML Help ActiveX buffer overflow

Buffer overflow on oversized 'Image' property. Vulnerability can be used for hidden trojan installation...

CVE-2006-3944

Microsoft Internet Explorer 6 on Windows XP SP2 is affected by CVE-2006-3944. The vulnerability concerns the Forms.ListBox.1 object, where the ListWidth property set to 0x7fffffff can trigger an integer overflow, and set to 0x7ffffffe can cause a null dereference, leading to a denial of service (...

CVE-2006-3591

CVE-2006-3591 affects Microsoft Internet Explorer 6.0. The vulnerability arises when code accesses the URL property of a TriEditDocument.TriEditDocument object before initialization, causing a NULL pointer dereference and an application crash (denial of service). The description consistently stat...

CVE-2006-3591: Undefined Security Weakness

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service application crash by accessing the URL property of a TriEditDocument.TriEditDocument object before it has been initialized, which triggers a NULL pointer dereference...

CVE-2006-3513

danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service application crash by accessing the Data property of a DirectAnimation DAUserData object before it is initialized, which triggers a NULL pointer dereference...

CVE-2006-3513

danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service application crash by accessing the Data property of a DirectAnimation DAUserData object before it is initialized, which triggers a NULL pointer dereference...

CVE-2006-3511

The CVE-2006-3511 issue affects Internet Explorer 6 on Windows XP SP2. The vulnerability arises from setting the fonts property of the HtmlDlgSafeHelper object, triggering a null dereference and causing a denial-of-service crash. Public reference sources in the connected documents corroborate thi...

Memory corruption

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Offic...

CVE-2006-3404

Buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property...

CVE-2006-3404

Buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property...

CVE-2006-3354: Undefined Security Weakness

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service crash by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which triggers a null dereference...

Microsoft Internet Explorer 6 - ADODB.Recordset Filter Property Denial of Service

Microsoft Internet Explorer 6 - ADODB.Recordset Filter Property Denial of Service source: https://www.securityfocus.com/bid/18773/info Microsoft Internet Explorer is prone to a denial-of-service condition when processing the 'ADODB.Recordset Filter Property' COM object. A successful attack may...

Microsoft Internet Explorer 6 - ADODB.Recordset Filter Property Denial of Service

source: https://www.securityfocus.com/bid/18773/info Microsoft Internet Explorer is prone to a denial-of-service condition when processing the 'ADODB.Recordset Filter Property' COM object. A successful attack may cause the browser to fail due to a null-pointer dereference. Microsoft Internet...

Realty Pro One Property Listing Script

Realty Pro One http://realtypro1.2run2.com/index.php Description: Realty Pro One is a powerful property listing tool with many features. Effected files: searchlookup.php images.php indexother.php requestinfo.php ?listingid Exploits & Vulns: XSS Vulnerability by the listingid variable:...

CVE-2006-2567: Undefined Security Weakness

Cross-site scripting XSS vulnerability in submitarticle.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting an article, as demonstrated using a javascript URI in a Cascading Style Sheets CSS property of a STYLE attribute of an...

Ubuntu 4.10 / 5.04 / 5.10 : mozilla-firefox, firefox vulnerabilities (USN-271-1)

Web pages with extremely long titles caused subsequent launches of Firefox browser to hang for up to a few minutes, or caused Firefox to crash on computers with insufficient memory. CVE-2005-4134 Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables...

CVE-2006-1730

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow...

Code injection

Internet Explorer 6 allows remote attackers to cause a denial of service application crash via any scrollbar Cascading Style Sheets CSS property...

CVE-2006-1719: Undefined Security Weakness

Internet Explorer 6 allows remote attackers to cause a denial of service application crash via any scrollbar Cascading Style Sheets CSS property...

wmp_overflow.htm.txt

WMP Plugin EMBED Exploit // Windows Media Player Plug-In EMBED Overflow Universal Exploit MS06-006 // By Matthew Murphy [email protected] // // DISCLAIMER: // // This exploit code is intended only as a demonstration tool for // educational or testing purposes. It is not intended to be used for...