Microsoft Windows GDIplus PNG Chunk Processing Integer Overflow (MS09-062; CVE-2009-2501; CVE-2013-1331)

An integer overflow vulnerability exists in Microsoft Windows GDI+. The vulnerability is due to lack of input validation when Microsoft Windows GDI+ handles PNG files. A remote attacker can exploit this vulnerability by enticing the target to open a specially crafted PNG file. Successful...

Sun Java HsbParser.getSoundBank Stack Buffer Overflow (CVE-2009-3867)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java is wide...

Apple iTunes Protocol Handler Stack Buffer Overflow (CVE-2009-0950)

Apple iTunes is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files. When iTunes is installed, it registers itself with the host Operating System as a protocol handler for several application URL schemes. A buffer overflow...

HP OpenView Network Node Manager OVwSelection Buffer Overflow (CVE-2009-4181)

The HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A buffer overflow...

Google Chrome HTTP Response Handling Memory Corruption (CVE-2009-2121)

Google Chrome is a web browser developed by Google. It provides rich web browsing similar to other browsers such as FireFox, Opera, and Internet Explorer. Chrome is unique from other browsers because it follows a multi-process architecture: by default, a separate process is allocated to each site...

HP OpenView Data Protector Application Recovery Manager Buffer Overflow (CVE-2009-3844)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...

HP OpenView Network Node Manager ovalarmsrv Integer Overflow (CVE-2008-2438)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, for example: OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. An integer overflow...

HP Power Manager Remote Code Execution (CVE-2009-2685)

A remote code execution vulnerability exists within HP Power Manager. The vulnerability is due to insufficient bounds checking in the HP Power Manager while processing URL parameters in the login form of the web based management web server. Remote unauthenticated attackers can exploit this...

Oracle Database DBMS_AQADM_SYS.GRANT_TYPE_ACCESS Procedure SQL Injection (CVE-2009-0977)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

nginx URI Parsing Buffer Underflow (CVE-2009-2629)

A remote buffer underflow vulnerability exists within nginx HTTP server. The vulnerability is due to an error when processing malicious HTTP requests. A remote attacker can exploit this vulnerability by sending an HTTP request containing specially crafted URI to the target system. Successful...

PR09-15: XSS injection vulnerability within HP System Management Homepage (Insight Manager)

PR09-15: XSS injection vulnerability within HP System Management Homepage Insight Manager Vulnerability found: 11th October 2009 Severity: Medium Description: A XSS vulnerability has been found within HP System Management; Arising from insufficient input filtering. By using a specially-crafted...

Mort Bay Jetty Multiple XSS

The remote instance of Mort Bay Jetty web server is affected by multiple cross-site scripting vulnerabilities. User-supplied input is not sanitized at multiple locations, which could allow an unauthenticated, remote attacker to inject arbitrary HTML or script code into a user's browser to be...

Apple iTunes AAC File Handling Integer Overflow (CVE-2006-1467)

Apple iTunes is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video and audio formats. One of the formats that the player is capable of processing is the protected advanced audio coding AAC media fil...

Internet Explorer Script Action Handler Buffer Overflow (CVE-2006-1245)

Microsoft Internet Explorer is the most widely used web browser application used today. The browser is capable of processing HTML, scripting languages, and various other popular Internet specifications. A vulnerability has been identified in Microsoft Internet Explorer. The vulnerability is creat...

Mozilla IFRAME Style Change Handling Code Execution (CVE-2008-1236)

Firefox is an open source web browser developed by Mozilla Foundation. The application is capable of interpreting and rendering many types of Internet content, including various versions of HTML, XML, CSS Cascade Style Sheet, Javascript, various graphic formats, and so on. Firefox is made availab...

Multiple Vendor CUPS Administration Interface CGI Heap Overflow (CVE-2008-0047)

The Common Unix Printing System CUPS is a modular printing system for Unix-like operating systems that allows a computer to act as a print server. A computer running CUPS is a host that can accept print jobs from client computers, process them, and send them to the appropriate printer. A heap...

Adobe Reader and Acrobat util.printf Stack Buffer Overflow (CVE-2008-2992)

The Adobe Acrobat family of products are popular PDF Portable Document Format document management tools. They can be used for viewing, creating and manipulating PDF files. These applications support third-party plug-ins, which can add extra function. Furthermore, Acrobat includes JavaScript...

MW6 Technologies Barcode.dll ActiveX Control Buffer Overflow (CVE-2009-0298)

MW6 Technologies is a provider of barcode software. As part of its software MW6 Technologies includes various ActiveX controls that are used to process the barcode data. One of these ActiveX controls is barcode.dll. There exists a heap-based buffer overflow vulnerability in MW6 Technologies...

SAP GUI TabOne ActiveX Control Caption List Buffer Overflow (CVE-2008-4827)

The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. There exists a buffer overflow vulnerability in the SAP GUI. Remote attackers can exploit...

Alt-N MDaemon IMAP Server FETCH Command Buffer Overflow (CVE-2008-1358)

The Internet Message Access Protocol IMAP allows for the access and manipulation of electronic mails. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. The MDaemon IM...