2203 matches found
Opera < 7.54 Empty Embedded Object DoS
The version of Opera installed on the remote host contains a flaw that allows an attacker to crash this browser remotely. To exploit this flaw, an attacker would need to craft a rogue website containing an embedded 'CCCC' object with an empty 'src' tag in it and would need to lure a victim to vis...
GLSA-200404-12 : Scorched 3D server chat box format string vulnerability
The remote host is affected by the vulnerability described in GLSA-200404-12 Scorched 3D server chat box format string vulnerability Scorched 3D build 36.2 and before does not properly check the text entered in the Chat box T key. Using format string characters, you can generate a heap overflow...
Opera < 7.24 getElementsByTagName JavaScript Method DoS
The version of Opera installed on the remote host is vulnerable to a remote denial of service. An attacker may cause the browser to crash by crafting a rogue HTML page containing a specific JavaScript command. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14336;...
MS Internet Explorer Remote Null Pointer Crash (mshtml.dll)
Exploit for unknown platform in category dos / poc =========================================================== MS Internet Explorer Remote Null Pointer Crash mshtml.dll =========================================================== Right Click aOn Me And Click "Save Target As" 0day.today 2018-04-09...
Microsoft Internet Explorer - mshtml.dll Remote Null Pointer Crash
Microsoft Internet Explorer - mshtml.dll Remote Null Pointer Crash Right Click aOn Me And Click "Save Target As" // milw0rm.com 2004-08-04...
Mandrake Linux Security Advisory : irssi (MDKSA-2003:117)
A vulnerability in versions of irssi prior to 0.8.9 would allow a remote user to crash another user's irssi client provided that the client was on a non-x86 architecture or if the 'gui print text' signal is being used by some script or plugin. The updated packages provide 0.8.9 which corrects the...
Remote crash of Half-Life servers and clients (versions before the 07 July 2004)
Luigi Auriemma Application: Half-Life engine http://half-life.sierra.com http://www.steampowered.com Versions: before the 07 July 2004 both Steam and not-Steam Platforms: Windows and Linux Bug: writing on a read-only memory zone causing crash Risk: high Exploitation: remote, versus server and...
[Full-Disclosure] Nokia 3560 Remote DOS
Hello list, I have found a vulnerability with Nokia's 3560 cellular phone, in which anyone may remotely crash the phone's OS, requiring the user to disconnect the battery to restore normal functionality. The attack only requires sending the person a specially crafted text message. This can be don...
RHEL 3 : mutt (RHSA-2004:050)
New mutt packages that fix a remotely-triggerable crash in the menu drawing code are now available. Mutt is a text-mode mail user agent. A bug was found in the index menu code in versions of mutt. A remote attacker could send a carefully crafted mail message that can cause mutt to segfault and...
giFT-FastTrack: remote denial of service attack
Background giFT-FastTrack is a plugin for the giFT file-sharing application. It allows giFT users to connect to the fasttrack network to share files. Description Alan Fitton found a vulnerability in the giFT-FastTrack plugin in version 0.8.6 and earlier. It can be used to remotely crash the giFT...
security flaw
The dochangecipherspec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that triggers a null dereference...
opera723.txt
Opera Array Allocation Managment Exploit ===================================== Dicovered by- d3thStaR !AM Greets: !AM Crew, Atomix, d3thstar, mgrd, 0x29A Crew, rootthief.com. Sources: Safari Overflow Exploit- kang Confirmed products effected- Opera 7.23 Linux, Opera 7.23 Windows =======Descriptio...
Remote crash in Ghost Recon engine
Luigi Auriemma Application: Ghost Recon engine and some games developed by Redstorm http://www.ghostrecon.com Games/Ver: Ghost Recon = 1.4 Desert Siege The Sum of all Fears = 1.1.1.0 Platforms: Windows Bug: remote crash, possible system freeze Risk: high Exploitation: remote, versus both server a...
Important: Red Hat Security Advisory: : Updated mutt packages fix remotely-triggerable crash
New mutt packages that fix a remotely-triggerable crash in the menu drawing code are now available. Mutt is a text-mode mail user agent. A bug was found in the index menu code in versions of mutt. A remote attacker could send a carefully crafted mail message that can cause mutt to segfault and...
Remote crash of Chaser game <= 1.50
Luigi Auriemma Application: Chaser http://www.chasergame.com Versions: = 1.50 Platforms: Windows Bug: crash reading of unallocated memory Risk: high Exploitation: remote, both server and client are vulnerables Date: 03 Feb 2004 Author: Luigi Auriemma e-mail: [email protected] web:...
[Full-Disclosure] Remote openbsd crash with ip6, yet still openbsd much better than windows
Georgi Guninski security advisory 66, 2004 Remote openbsd crash with ip6, yet still openbsd much better than windows Systems affected: tested on openbsd 3.4 not clear about netbsd freebsd not vulnerable Risk: Medium Date: 4 February 2004 Legal Notice: This Advisory is Copyright c 2004 Georgi...
mIRC 6.1 - DCC Get Dialog Denial of Service
source: https://www.securityfocus.com/bid/9492/info A vulnerability has been reported to exist in mIRC that may allow a remote attacker to crash a vulnerable mIRC client. It has been reported that the issue will present itself only in certain circumstances. Although unconfirmed, due to the nature...
[Full-Disclosure] Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows
Georgi Guninski security advisory 65, 2004 Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows Systems affected: qmail 1.03 on linux, don't know about other OSes. Risk: Unknown. maybe so, maybe no. Date: 15 January 2004 Legal Notice: This...
Multiple vulnerabilities in WWW Fileshare Pro <= 2.42
Luigi Auriemma Application: WWW File Share Pro http://www.wfshome.com Versions: = 2.42 Platforms: Windows Bugs: - arbitrary server's files overwriting - remote crash - directory authorization bypass Risk: critical Exploitation: remote Date: 14 Jan 2004 Author: Luigi Auriemma e-mail:...
wwwfilesharepro.txt
Luigi Auriemma Application: WWW File Share Pro http://www.wfshome.com Versions: From the vendor's website: "WWW File Share Pro is a small HTTP server that can help you share files with your friends. They can download files from your computer or upload files from theirs. Simply specify a directory...