CVE-2013-0006: Undefined Security Weakness

Microsoft XML Core Services aka MSXML 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."...

Microsoft XML Core Services Remote Code Execution Vulnerabilities (2756145)

This host is missing a critical security update according to Microsoft Bulletin MS13-002. OpenVAS Vulnerability Test $Id: secpodms13-002.nasl 4922 2017-01-02 16:28:42Z cfi $ Microsoft XML Core Services Remote Code Execution Vulnerabilities 2756145 Authors: Rachana Shetty Copyright: Copyright c 20...

Microsoft XML Core Services整数截断漏洞（MS13-002)

CVECAN ID: CVE-2013-0006 Microsoft Windows是微软公司推出的一系列操作系统。 Microsoft XML Core Services在解析XML内容时存在整数溢出错误，可被利用远程执行任意代码。 0 Microsoft Office 2007 Microsoft Office Office 2003 Professional Edi Microsoft Office 2003 Student and Teacher Edi Microsoft Office 2003 Standard Edition Microsoft Office 2003...

Microsoft XML Core Services Remote Code Execution Vulnerabilities (2756145)

This host is missing a critical security update according to Microsoft Bulletin MS13-002. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-6460

CVE-2012-6460 affects Opera browser versions before 11.67 and 12.x before 12.02, where a crafted web site can truncate a dialog and potentially trigger downloading and execution of arbitrary programs. Connected sources confirm this is a browser-level vulnerability with remote code execution impli...

PT-2013-1953

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.67 Opera versions 12.x prior to 12.02 Description The issue allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...

CVE-2012-6460: Undefined Security Weakness

Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...

Java write file file name 0 0 truncation BUG that caused file upload vulnerability and fix-vulnerability warning-the black bar safety net

Java in the above two environments to write the files, because 0 0 is truncated and not correct for the new generated file name. For example, the user needs to username abc. jsp . jpg, but after 0 0 after truncation, the resulting file name becomes the abc. jsp , therefore we are in relation to t...

. net file upload vulnerability in the code example and solution-vulnerability warning-the black bar safety net

At this point in the test when stripped down the code and some lost, and only a patch solution. We make do and see. Something very simple. string str = filename. Substringfilename. LastIndexOf"." + 1, 3; if str == "png" || str == "gif" || str == "jpg" || str == "jpeg" || str == "PNG" || str ==...

Apple Mac OS X libsecurity_cdsa_plugin Malloc Integer Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Mac OSX. Authentication is not required to exploit this vulnerability. The flaw exists within the libsecuritycdsaplugin which implements routines defined in libsecuritycssm. The library defin...

Scientific Linux Security Update : openoffice.org on SL4.x i386/x86_64

An integer truncation error, leading to a heap-based buffer overflow, was found in the way the OpenOffice.org Impress presentation application sanitized a file's dictionary property items. An attacker could use this flaw to create a specially crafted Microsoft Office PowerPoint file that, when...

Scientific Linux Security Update : openoffice.org on SL3.x i386/x86_64

An integer truncation error, leading to a heap-based buffer overflow, was found in the way the OpenOffice.org Impress presentation application sanitized a file's dictionary property items. An attacker could use this flaw to create a specially crafted Microsoft Office PowerPoint file that, when...

Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64

A numeric truncation error was found in the OpenOffice.org memory allocator. If a carefully crafted file was opened by a victim, an attacker could use this flaw to crash OpenOffice.org or, possibly, execute arbitrary code. CVE-2008-3282 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : openoffice.org2 on SL4.x i386/x86_64

An integer truncation error, leading to a heap-based buffer overflow, was found in the way the OpenOffice.org Impress presentation application sanitized a file's dictionary property items. An attacker could use this flaw to create a specially crafted Microsoft Office PowerPoint file that, when...

Script local/remote file inclusion/reading and file name truncation vulnerability FUZZ tool details-vulnerability warning-the black bar safety net

Script file include vulnerability can be said is endless, bitter in the market, there is no good comprehensive functions of the targeted open-source tools to do the reference, now the file contains several typical vulnerability for an example. To Plug-in source code and detailed description: This...

CVE-2012-0867

CVE-2012-0867 affects PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3. The vulnerability truncates the SSL certificate common name to 32 characters when verifying hostnames, enabling remote attackers to spoof connections if the hostname is exactly 32 characters. This is...

Vulnerability in contrib module (CVE-2012-2143)

Passwords containing the byte 0x80 passed to the crypt function in pgcrypto are incorrectly truncated if DES encryption was used...

XnView < 1.99.0 Multiple Buffer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is earlier than 1.99.0. It therefore is reportedly affected by the following heap-based buffer overflow vulnerabilities : - An integer truncation issue exists related to the handling of the depth value in 'Sun Raster' RAS image files. - A...

postgresql: MITM due improper x509_v3 CN validation during certificate verification

PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters...

PT-2012-2920

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 8.4.x through 8.4.10 PostgreSQL versions 9.0.x through 9.0.6 PostgreSQL versions 9.1.x through 9.1.2 Description The issue allows remote attackers to spoof connections when the host name is exactly 32 characters, due to the...