Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' RCE Vulnerability

Microsoft Windows is prone to a remote code execution RCE vulnerability when processing the protocol headers for the Server Message Block SMB Negotiate Protocol Request. NOTE: Reportedly, for this issue to be exploitable, file sharing must be enabled. SPDX-FileCopyrightText: 2009 Greenbone AG Som...

Adobe Photoshop Elements 8.0 Active File Monitor Privilege Escalation

No description provided by source. Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Tested on Microsoft Windows XP SP3 The "Adobe Active File Monitor V8" service i...

SuSE 11 Security Update : libapr-util1 (SAT Patch Number 969)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

War FTP Daemon Remote Denial Of Service Vulnerability

There has been reported an exploit where War FTP Daemon 1.82 RC 12 could be crashed from any logged in users, included anonymous users if they are allowed to log in. The exploit might also affect previous versions of the server. The exploit was reported to me Thu Sep 10 16:46:20 2009 by...

nginx -- remote denial of service vulnerability

nginx development team reports: A segmentation fault might occur in worker process while specially crafted request handling...

CVE-2009-3111

The raddecode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service radiusd crash via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to...

CVE-2009-3083

The msnslpsiprecv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an SLP invite message that lacks certain required fields, as...

PT-2009-3696 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A heap-based buffer overflow issue exists in the Wireless LAN AutoConfig Service, allowing remote attackers to execute arbitrary code via a malformed wireless frame...

Mozilla Firefox 'document.location' Denial Of Service Vulnerability

The host is installed with Firefox browser on Windows XP and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodfirefoxdocumentlocationdosvuln.nasl 6530 2017-07-05 06:23:50Z cfischer $ Mozilla Firefox 'document.location' Denial Of Service Vulnerability Authors:...

Microsoft Internet Explorer 'location.hash' DOS Vulnerability

This host is installed with Internet Explorer and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmsielocationhashdosvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer 'location.hash' DOS Vulnerability Authors: Sharath S Copyright:...

Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (1)

source: https://www.securityfocus.com/bid/36139/info The Novell Client ActiveX control is prone to a remote denial-of-service vulnerability because of an unspecified error. A successful attack allows a remote attacker to crash an application that is using the ActiveX control typically Internet...

CVE-2009-2542

Netscape 6 and 8 allows remote attackers to cause a denial of service memory consumption via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability Advisory ID: cisco-sa-20090624-gateway Revision 1.0 For Public Release 2009 June 24 1600 UTC GMT...

CVE-2009-1196

The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service cupsd daemon outage or crash via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."...

CVE-2008-6829

VicFTPS 5.0 allows remote attackers to cause a denial of service crash via a LIST command that starts with a "//" forward slash, backward slash, forward slash. NOTE: this might be the same issue as CVE-2008-2031...

CVE-2009-1789

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...

CVE-2009-1492

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code...

RealNetworks RealPlayer Gold 10.0 MP3 - File Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/34719/info RealNetworks RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files. Exploiting this issue allows remote attackers to crash the application, denying further service to...

Mandriva Update for perl-Net-DNS MDKSA-2007:146 (perl-Net-DNS)

Check for the Version of perl-Net-DNS OpenVAS Vulnerability Test Mandriva Update for perl-Net-DNS MDKSA-2007:146 perl-Net-DNS Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Sun Java System Calendar Server重复URI请求拒绝服务漏洞

BUGTRAQ ID: 34150 CVECAN ID: CVE-2009-1219 Sun Java System Calendar Server是Sun Java System通信套件中的日程服务器组件。 如果远程攻击者向Calendar Server连续两次发送特制的HTTP请求并在tzid参数中设置了字母字符的话，就会导致Calendar Server进程崩溃，可能留下类似于以下栈追踪的崩溃dump，具体取决于系统配置： $ pstack core ... ... ----------------- lwp 4 / thread 4 --------------------...