CVE-2006-4567: Undefined Security Weakness

Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious...

CVE-2006-4534

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo...

CVE-2006-4534

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo...

CVE-2006-4534: Undefined Security Weakness

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo...

CVE-2006-4471

The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors...

CVE-2006-4471

CVE-2006-4471 : In Joomla! before 1.0.11, the Admin Upload Image feature allows remote authenticated users to upload files outside the /images/stories/ directory via unspecified vectors. Affected: Joomla! prior to 1.0.11. Root cause: insufficient enforcement of directory restrictions during image...

CVE-2006-3961: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in McSubMgr ActiveX control mcsubmgr.dll in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute...

CVE-2006-3935

Alkacon OpenCms before 6.2.2 has improper access control in system/workplace/views/admin/admin-main.jsp, allowing remote authenticated users to perform six admin actions (broadcast messages, list users, add webusers, upload import/export files, upload modules, read the log file) by manipulating t...

CVE-2006-3921

Sun Java System Application Server SJSAS 7 through 8.1 and Web Server SJSWS 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI...

Yahoo messenger bug

Hey there is an error in the message. "4. The remote user will crash closing down her messenger" this bug doesn't crash messenger, simply force yahoo messenger to open "google.com" in the internet explorer. Regards. Pregunta. Responde. Descubri. Todo lo que querias saber, y lo que ni imaginabas,...

CVE-2006-3779

Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges...

CVE-2006-3796

CVE-2006-3796 affects DeluxeBB 1.07 and earlier. The vulnerability arises from improper handling of a username consisting of a single space, allowing remote authenticated users to log in as the 'space' user, post as a guest, and prevent the administrator from banning that user. The description do...

RHEL 3 : kernel (RHSA-2006:0437)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the eighth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles...

CVE-2006-3600: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp TunePimp 0.4.2 allow remote user-assisted attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3 error strings...

CVE-2006-3581

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large 1 DTM and 2 S3M files...

CVE-2006-3582

Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of 1 CFF, 2 MTK, 3 DMO, and 4 U6M files...

CVE-2006-3582: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of 1 CFF, 2 MTK, 3 DMO, and 4 U6M files...

CVE-2006-3581: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large 1 DTM and 2 S3M files...

VulnCheck KEV: CVE-2006-3059

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086...

CVE-2006-3493

CVE-2006-3493 (Microsoft Office) involves a buffer overflow in the LsCreateLine function of mso.dll and mso9.dll used by Word and possibly other Office components (Office 2000–2003). The memory corruption could crash the Word client or potentially lead to arbitrary behavior when processing crafte...