461 matches found
CVE-2009-0944
CVE-2009-0944 affects Mac OS X: The Spotlight Importer for Microsoft Office in Spotlight on Mac OS X 10.4.11 and 10.5 up to 10.5.6/10.5.x before 10.5.7 allows memory corruption via crafted Office files, leading to possible arbitrary code execution or a crash. Affected component: Spotlight’s Micro...
CVE-2009-0944
The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a file that triggers memory corruptio...
Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. Mac OS X 10.5.7 contains security fixes for the following products : - Apache - ATS - BIND - CFNetwork - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - iChat -...
CVE-2009-0944: Improper Control of Generation of Code
The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a file that triggers memory corruptio...
Mac OS X Multiple Vulnerabilities (Security Update 2009-002)
The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied. This security update contains fixes for the following products : - Apache - ATS - BIND - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - IPSec -...
Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities
CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...
Memory corruption
Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service application termination or execute arbitrary code via a crafted .XLS file that triggers memory corruption in the Microsoft Office Spotlight Importer...
CVE-2007-5861
Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service application termination or execute arbitrary code via a crafted .XLS file that triggers memory corruption in the Microsoft Office Spotlight Importer...
CVE-2007-5861
Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service application termination or execute arbitrary code via a crafted .XLS file that triggers memory corruption in the Microsoft Office Spotlight Importer...
CVE-2007-5861
CVE-2007-5861 describes an unspecified vulnerability in Spotlight for Mac OS X 10.4.11 where a crafted .XLS file triggers memory corruption in the Microsoft Office Spotlight Importer, allowing user-assisted denial of service or arbitrary code execution. Affected: Mac OS X 10.4.11 with Spotlight i...
CVE-2007-5861: Undefined Security Weakness
Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service application termination or execute arbitrary code via a crafted .XLS file that triggers memory corruption in the Microsoft Office Spotlight Importer...
DMA[2007-0109a] - 'Apple Finder Disk Image Volume Label Overflow / DoS'
DMA2007-0109a - 'Apple Finder Disk Image Volume Label Overflow / DoS' Author: Kevin Finisterre Vendors: http://www.apple.com Product: '= OSX 10.4 ?' References: http://www.digitalmunition.com/DMA2007-0109a.txt http://www.apple.com/macosx/features/finder/...
CVE-2006-6543
Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 login UserName and possibly 2 password parameter. NOTE: some of these details are obtained from third party information...
CVE-2006-6543
Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 login UserName and possibly 2 password parameter. NOTE: some of these details are obtained from third party information...
CVE-2006-6543
CVE-2006-6543 affects AppIntellect SpotLight CRM 1.0, specifically the login.asp component. The vulnerability is described as multiple SQL injection flaws that allow an attacker to execute arbitrary SQL commands through the (1) login (UserName) parameter and potentially (2) the password parameter...
CVE-2006-6543: Undefined Security Weakness
Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 login UserName and possibly 2 password parameter. NOTE: some of these details are obtained from third party information...
SpotLight CRM 1.0 (login.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set...
AppIntellect SpotLight CRM - login.asp SQL Injection
AppIntellect SpotLight CRM - login.asp SQL Injection source: https://www.securityfocus.com/bid/21521/info AppIntellect SpotLight CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
SpotLight CRM 1.0 - login.asp SQL Injection
SpotLight CRM 1.0 - login.asp SQL Injection Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set...
SpotLight CRM 1.0 (login.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ SpotLight CRM 1.0 login.asp Remote SQL Injection Vulnerability ================================================================ Title : SpotLight CRM 1.0 login.asp | Remote S...