8873 matches found
CVE-1999-0946
CVE-1999-0946 documents a buffer overflow in the Yamaha MidiPlug triggered via a Text variable in an EMBED tag. The available sources confirm the vulnerable component is the MidiPlug and identify the root cause as improper handling of a Text variable within an EMBED tag, leading to a potential ov...
Microsoft Virtual Machine 2000/3100/3200/3300 Series - 'com.ms.activeX.ActiveXComponent' Arbitrary Program Execution
source: https://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsoft Internet Explorer or Outlook. Th...
New Solaris root exploit for /usr/lib/lp/bin/netpr
Word on the street is that others have noticed this hole, so here goes. Have you noticed how many holes have been discovered in the printing system on Solaris? The netpr program is no exception. Included with this message are two exploits I wrote in 1999, one for SPARC versions of Solaris and the...
Очередной обзор новостей Linux
No description provided...
winreal.6-7.txt
Win32 Realplayer 6/7 Buffer Overflow Vulnerability Summary: ---------------------- There is a buffer overflow in the Win32 RealPlayer Basic client, versions 6 and 7. This appears to occur when 299 characters are entered as a 'location' to play, such as http://aaaaa..... with 300 a's. I have teste...
Переполнение буфера в Real Player 6/7
Переполнение буфера при указании в качестве источника URL свыше 299 символов. Это может быть использовано при атаке через браузер с помощью тага EMBED...
CVE-1999-0750
Technical details for CVE-1999-0750 are not publicly provided in the supplied documents. Monitor for updates from official feeds.
CVE-1999-0465
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter...
CVE-1999-0490
MSHTML.DLL in Internet Explorer 5.0 is affected by CVE-1999-0490. The vulnerability enables a remote attacker to cause information disclosure by using an IMG SRC tag to learn local file information. The documented impact is partial disclosure of data from the target user’s files, with network-bas...
CVE-1999-0465
The vulnerability CVE-1999-0465 affects Lynx and Internet Explorer via an IMG tag with an excessively large width parameter, which can crash the browser. Multiple connected sources confirm the issue stems from an HTML IMG width value and results in a crash, implying a denial of service effect on ...
Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass
Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass source: https://www.securityfocus.com/bid/954/info Firewall-1 includes the ability to alter script tags in HTML pages before passing them to the client's browser. This alteration invalidates the tag, rendering the script unexecutabl...
Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass
source: https://www.securityfocus.com/bid/954/info Firewall-1 includes the ability to alter script tags in HTML pages before passing them to the client's browser. This alteration invalidates the tag, rendering the script unexecutable by the browser. In version 3, this function can be bypassed by...
CVE-1999-0876
CVE-1999-0876 affecting Microsoft Internet Explorer 4.0, where a buffer overflow is triggered via an EMBED tag. The connected Red Hat and NVD entries reiterate this description. The documented impact indicates complete confidentiality, integrity, and availability compromises with a base score of ...
CVE-2000-0057
Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information...
CVE-1999-0876
Buffer overflow in Internet Explorer 4.0 via EMBED tag...
CVE-1999-0876
Buffer overflow in Internet Explorer 4.0 via EMBED tag...
PT-2000-1074 · Microsoft · Hotmail
Name of the Vulnerable Software and Affected Versions: Hotmail affected versions not specified Description: The issue arises from improper filtering of JavaScript code in a user's mailbox, allowing a remote attacker to execute code. This can be achieved via the LOWSRC or DYNRC parameters in the I...
metasearch
Vulnerable Program: Meta Tag Generator meta.pl Platform : UNIX Company : www.cgi-access.com Impact : Remote users can view arbitary files with httpd privilidges Found by : slackette [email protected] Date : 14th November Meta Tag Generator As quoted from their site, "You can now offer your...
Hylafax Hylafax 4.0.2 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/765/info Hylafax is a popular fax server software package designed to run on multiple UNIX operating systems. Some versions of Hylafax ship with a vulnerable sub program 'faxalter'. This program is installed SUID UUCP and has a buffer overflow which if...