Spree Hash Restriction Weakness URL Parsing Order State Value Manipulation

Spree contains a hash restriction weakness that occurs when parsing a modified URL. This may allow an attacker to manipulate order state values...

Microsoft Windows MHTML URL Parsing Information Disclosure (MS08-048; CVE-2008-1448)

MHTML MIME Encapsulation of Aggregate HTML is an Internet standard that defines the MIME structure that is used to wrap HTML content. An information disclosure vulnerability has been reported in Outlook Express and Windows Mail due to a flaw in the MHTML protocol. The vulnerability is caused when...

OrbitDownloader buffer overflow

Buffer overflow on Unicode URL parsing...

Webwasher content fitler DoS

Proxy hangs on URL parsing...

Microsoft Office Web Components Spreadsheet ActiveX control URL parsing stack buffer overflow

Overview The Microsoft Office Web Components ActiveX controls contain a stack buffer overflow in the processing of URLs, which allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office Web Components are ActiveX controls that provide...

CVE-2006-4695

CVE-2006-4695 is a remote-code-execution vulnerability in Microsoft Office Web Components 2000 (OWC) due to a buffer/stack overflow when parsing specially crafted URLs in the OWC.Spreadsheet.9 ActiveX control. Exploitation could occur when a user views a malicious page, potentially giving the att...

Debian DSA-1496-1 : mplayer - buffer overflows

Several buffer overflows have been discovered in the MPlayer movie player, which might lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0485 Felipe Manzano and Anibal Sacco discovered a buffer overflow in the...

SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 4544)

The IBM Java JRE/SDK has been brought to release 1.5.0 SR5a, containing several bugfixes, including the following security fixes : - A buffer overflow vulnerability in the image parsing code in the JavaTM Runtime Environment may allow an untrusted applet or application to elevate its privileges...

openSUSE 10 Security Update : snort (snort-1598)

This update fixes an evasion attack on URL parsing. The faulty code is in the httpinspect preprocessor. CVE-2006-2769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update snort-1598. The text...

A buffer overflow vulnerability in Java Web Start URL parsing code

Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file...

A buffer overflow vulnerability in Java Web Start URL parsing code

Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file...

Opera < 9.22 Multiple Vulnerabilities

The version of Opera installed on the remote host reportedly can be tricked into attempting to dereference an invalid object pointer when parsing a specially crafted BitTorrent header. This could cause the application to crash or even lead to execution of arbitrary code subject to the privileges ...

CVE-2007-2225

CVE-2007-2225 involves a cross-domain information disclosure in the MHTML URI handler used by Outlook Express 6 and Windows Mail (on Windows Vista). The vulnerability arises when the MHTML protocol handler processes HTTP headers, causing IE to bypass domain restrictions and potentially disclose d...

Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability

====================================================================== Secunia Research 10/04/2007 - Microsoft Agent URL Parsing Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Agent ActiveX memory corruption

Buffer overflow on URL parsing...

FreeBSD : opera -- URL parsing heap overflow vulnerability (4867ae85-608d-11db-8faf-000c6ec775d9)

iDefense Labs reports : Remote exploitation of a heap overflow vulnerability within version 9 of Opera Software's Opera Web browser could allow an attacker to execute arbitrary code on the affected host. A flaw exists within Opera when parsing a tag that contains a URL. A heap buffer with a...

iDefense Security Advisory 10.17.06: Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability

Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability iDefense Security Advisory 10.17.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 17, 2006 I. BACKGROUND Opera is a cross-platform web browser. More information is available from http://www.opera.com/ II...

opera -- URL parsing heap overflow vulnerability

iDefense Labs reports: Remote exploitation of a heap overflow vulnerability within version 9 of Opera Software's Opera Web browser could allow an attacker to execute arbitrary code on the affected host. A flaw exists within Opera when parsing a tag that contains a URL. A heap buffer with a consta...

[SA22327] Macromedia Breeze URL Parsing Information Disclosure

TITLE: Macromedia Breeze URL Parsing Information Disclosure SECUNIA ADVISORY ID: SA22327 VERIFY ADVISORY: http://secunia.com/advisories/22327/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Macromedia Breeze / Acrobat Connect Professional 5.x...

CVE-2006-5200

Concrete details found: CVE-2006-5200 affects Adobe Breeze 5 Licensed Server and Breeze 5.1 Licensed Server. The issue is a directory traversal via URL parsing, allowing a remote attacker to read arbitrary files. The public descriptions indicate a remote vector related to URL parsing, with docume...