[VulnWatch] Fortinet Advisory: "Apple QuickTime Player ImageWidth Integer Overflow Vulnerability"

Fortinet Security Advisory: FSA-2006-05 Apple QuickTime Player ImageWidth Integer Overflow Vulnerability Advisory Date : January 12, 2006 Reported Date : November 28, 2005 Vendor : Apple computers Affected Products : Apple QuickTime Player v7.0.3 Severity : High Reference :...

[VulnWatch] Fortinet Advisory: Apple QuickTime Player Color Map Entry Size Buffer Overflow

Fortinet Security Advisory: FSA-2006-06 Apple QuickTime Player Color Map Entry Size Buffer Overflow Advisory Date : January 12, 2006 Reported Date : November 28, 2005 Vendor : Apple computers Affected Products : Apple QuickTime Player v7.0.3 Severity : High Reference :...

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)

eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow 2 !/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote "estara softphone" exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060...

Microsoft Outlook Critical Vulnerability

John Heasman and Mark Litchfield of NGSSoftware have discovered a critical vulnerability affecting Microsoft Outlook. The vulnerable versions include: Microsoft Outlook 2000 inc. Microsoft Office 2000 Service Pack 3 and Multilanguage packs Microsoft Outlook 2002 inc. Microsoft Office XP Service...

CVE-2005-2344

The vulnerability CVE-2005-2344 affects Research in Motion’s BlackBerry Attachment Service (BES) for BES installations on Windows, where a malformed PNG file can trigger a heap-based buffer overflow. This can cause the Attachment Service to stop responding or crash, and may allow arbitrary code e...

CVE-2005-2344: Improper Restriction of Operations within the Bounds of a Memory Buffer

The BlackBerry Attachment Service in Research in Motion RIM BlackBerry Enterprise Server BES 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics PNG file that triggers a heap-based buffer overflow...

CVE-2005-2343

Research in Motion RIM BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service hang via a Java Application Description JAD file with a long application name and vendor string, which prevents a browser dialog from being properly...

CVE-2005-2341: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Research in Motion RIM BlackBerry Attachment Service allows remote attackers to cause a denial of service hang via an e-mail attachment with a crafted TIFF file...

CVE-2005-2342

Research in Motion RIM BlackBerry Router allows remote attackers to cause a denial of service communication disruption via crafted Server Routing Protocol SRP packets...

win32 Download & Exec Shellcode 226 bytes+

Exploit for win32 platform in category shellcode ========================================== win32 Download & Exec Shellcode 226 bytes+ ========================================== / \ WINSHELLCODE / :: win32 download & exec shellcode :: \ :: by Darkeagle of Unl0ck Research Team http://exploiterz.or...

CVE-2005-2342

Research in Motion RIM BlackBerry Router allows remote attackers to cause a denial of service communication disruption via crafted Server Routing Protocol SRP packets...

CVE-2005-2343

Research in Motion RIM BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service hang via a Java Application Description JAD file with a long application name and vendor string, which prevents a browser dialog from being properly...

Research in Motion (RIM) BlackBerry Handheld web browser does not properly handle Java Application Description (JAD) files

Overview The Research in Motion RIM BlackBerry Handheld web browser is vulnerable to a denial of service via a specially crafted Java Application Description JAD file. Description The BlackBerry Handheld web browser does not properly handle malformed JAD files. JAD files in J2ME are used to...

Secunia Research: TUGZip ARJ Archive Handling Buffer Overflow Vulnerability

====================================================================== Secunia Research 30/12/2005 - TUGZip ARJ Archive Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA17865] VisNetic Mail Server Multiple Webmail Vulnerabilities

TITLE: VisNetic Mail Server Multiple Webmail Vulnerabilities SECUNIA ADVISORY ID: SA17865 VERIFY ADVISORY: http://secunia.com/advisories/17865/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: VisNetic Mail Server 8.x...

Secunia Research: IceWarp Web Mail Multiple File Inclusion Vulnerabilities

====================================================================== Secunia Research 27/12/2005 - IceWarp Web Mail Multiple File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

VisNetic / Merak Mail Server Multiple Remote Vulnerabilities

The remote host is running VisNetic / Merak Mail Server, a multi- featured mail server for Windows. The webmail and webadmin services included in the remote version of this software are prone to multiple flaws. An attacker could send specially crafted URLs to execute arbitrary scripts, perhaps...

win32 Download & Exec Shellcode 226 bytes+

win32 Download & Exec Shellcode 226 bytes+. Shellcode exploit for win32 platform / \ WINSHELLCODE / :: win32 download & exec shellcode :: \ :: by Darkeagle of Unl0ck Research Team http://exploiterz.org :: / :: to avoid 0x00 use ^^xor^^ : :: \ :: greets goes to: Sowhat, 0x557 guys, 55k7 guys,...

CVE-2005-4434

Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4434

Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...