Microsoft Protected Extensible Authentication Protocol Memory Corruption Vulnerability

Description The implementation of the Microsoft Protected Extensible Authentication Protocol PEAP used by Microsoft's Internet Authentication System is prone to a remote memory-corruption vulnerability. A remote attacker can exploit this issue to execute arbitrary code with SYSTEM-level privilege...

Microsoft Internet Explorer XHTML DOM Manipulation Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required in that a user must visit a malicious web page. The specific flaw exists in the manipulation and parsing of certain HTML tags. The ordering...

AdaptCMS Lite Cross Site Scripting and Remote File Include Vulnerabilities

AdaptCMS Lite is prone to multiple cross-site scripting vulnerabilities and a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Secunia Research: Roxio Creator Image Rendering Integer Overflow Vulnerability

====================================================================== Secunia Research 02/12/2009 - Roxio Creator Image Rendering Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: RhinoSoft Serv-U TEA Decoding Buffer Overflow

====================================================================== Secunia Research 18/11/2009 - RhinoSoft Serv-U TEA Decoding Buffer Overflow - ====================================================================== Table of Contents Affected...

Hellcode Research: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability

Vendor: Novell Product: eDirectory for Windows Version: 8.8 SP5 Vulnerability: Stack Overflow Description: Vulnerability is in "/dhost/httpstk" This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. The specific flaw exists in the...

Apple Safari Multiple Vulnerabilities (Nov 2009)

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

MySQL yaSSL SSL Hello Message Buffer Overflow (CVE-2008-0226)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol. MySQL Server...

Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Power Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of URL parameters when posting to the login form of the web bas...

ZDI-09-079: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability

ZDI-09-079: Sun Java Runtime AWT setBytePixels Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-079 November 4, 2009 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Sun Java Runtime AWT setDifflCM Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the processing of arguments to t...

Mozilla Seamonkey Multiple Vulnerabilities Nov-09 (Windows)

This host is installed with Mozilla Seamonkey browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbseamonkeymultvulnnov09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities Nov-09 Windows Authors: Sharath S Copyright: Copyright c...

Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Java. User interaction is required in that a user must open a malicious file or visit a malicious web page. The specific flaw exists in the parsing of long file:// URL arguments to...

Mozilla Seamonkey Multiple Vulnerabilities Nov-09 (Linux)

This host is installed with Mozilla Seamonkey browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbseamonkeymultvulnnov09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities Nov-09 Linux Authors: Sharath S Copyright: Copyright c 200...

Mozilla Firefox Multiple Vulnerabilities Nov-09 (Linux)

This host is installed with Mozilla Firefox browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbfirefoxmultvulnnov09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Vulnerabilities Nov-09 Linux Authors: Sharath S Copyright: Copyright c 2009...

Mozilla Firefox Multiple Vulnerabilities (Nov 2009) - Windows

Mozilla Firefox browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amiro.CMS 5.4.0.0 Root Folder Disclosure

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of notification Developer: 01.07.2009...

Microsoft Office BMP Image Colour Handling Integer Overflow

No description provided by source. ====================================================================== Secunia Research 14/10/2009 - Microsoft Office BMP Image Colour Handling Integer Overflow - ====================================================================== Table of Contents Affected...

Amiro.CMS 5.4.0.0 - Path Disclosure

Amiro.CMS 5.4.0.0 - Path Disclosure ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of...

PT-2009-4910 · Microsoft · Office Excel Viewer +27

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 6 SP1 Windows XP SP2 and SP3 Windows Server 2003 SP2 Office XP SP3 Office 2003 SP3 2007 Microsoft Office System SP1 and SP2 Office Project 2002 SP1 Visio 2002 SP2 Office Word Viewer Word Viewer 2003 Gold and SP3...