CVE-2007-2343

Affected products: Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1. Component vulnerable: TFTPD. Root cause: stack-based buffer overflow. Impact: remote attackers can execute arbitrary code via crafted requests containing long file names; network-based exploit with high impact (...

CVE-2007-2293

Multiple stack-based buffer overflows in the processsdp function in chansip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long 1 T38FaxRateManagement or 2 T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP...

Stack overflow

Stack-based buffer overflow in the Microgaming Download Helper ActiveX control dlhelper.dll before 7.2.0.19, and the WebHandler Class control, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-1691

The CVE-2007-1691 issue is a stack-based buffer overflow in Second Sight Software's ActiveMod ActiveX control (ActiveMod.ocx) that can allow a remote attacker to execute arbitrary code. CERT notes the vulnerability can be exploited by convincing a user to view a crafted HTML document and provides...

CVE-2007-2062

Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary code via a long FILE argument in a CUE file...

CVE-2007-1891

Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control DownloadManagerV2.ocx after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte cou...

CVE-2007-2057

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

CVE-2007-1891

Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control DownloadManagerV2.ocx after 2.0.4.4 but before 2.2.1.0 allows remote attackers to execute arbitrary code, related to misinterpretation of the nSize parameter as a byte cou...

CVE-2007-2057

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

CVE-2007-1892

Stack-based buffer overflow in Akamai Technologies Download Manager ActiveX Control DownloadManagerV2.ocx before 2.2.1.0 allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2007-1891...

CVE-2007-1997

Integer signedness error in the 1 cabunstore and 2 cabextract functions in libclamav/cab.c in Clam AntiVirus ClamAV before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based...

CVE-2007-1997

Integer signedness error in the 1 cabunstore and 2 cabextract functions in libclamav/cab.c in Clam AntiVirus ClamAV before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based...

[Full-disclosure] Microsoft DNS Server Remote Code execution Exploit and analysis

Hi, im sending you the headers of the new exploit code for microsoft DNS servers. You can download the full source code exploit and analysis at: - http://www.514.es/MicrosoftDnsServerExploit.zip or - http://www.48bits.com/exploits/dnsxpl.rar Microsoft DNS Server Remote Code execution Exploit and...

Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow

/ Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary erro...

CVE-2007-1204

The CVE-2007-1204 issue affects Microsoft Windows XP SP2 with the UPnP service. It is a stack-based buffer overflow triggered by specially crafted HTTP headers in UPnP requests/notifications, allowing a remote attacker on the same subnet to execute arbitrary code in the context of the vulnerable ...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

HP Mercury Quality Center ActiveX Control ProgColor Buffer Overflow

This module exploits a stack-based buffer overflow in SPIDERLib.Loader ActiveX control Spider90.ocx 9.1.0.4353 installed by TestDirector TD for Hewlett-Packard Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32. By setting an overly long value to 'ProgColor', an attacker ca...

Debian DSA-1273-1 : nas - several vulnerabilities

Several vulnerabilities have been discovered in nas, the Network Audio System. - CVE-2007-1543 A stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in nas allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection. -...

Mandrake Linux Security Advisory : openoffice.org (MDKSA-2007:073)

Stack-based buffer overflow in the StarCalc parser in OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary code via a crafted document. CVE-2007-0238 OpenOffice.org OOo Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell...

CVE-2007-1866

CVE-2007-1866 involves a stack-based buffer overflow in the dns_decode_reverse_name function of the dproxy-nexgen project (dns_decode.c). The vulnerability allows remote attackers to gain arbitrary code execution by sending a crafted UDP DNS packet to port 53. This is a remote-exploit scenario wi...