1459 matches found
CVE-2005-1261
CVE-2005-1261 is a stack-based buffer overflow in Gaim's URL parsing that affects versions before 1.3.0. A remote attacker could trigger arbitrary code execution by sending an IM containing a very large URL. Public disclosures and advisories (SUSE, OpenVAS/Gentoo, Mandrake/CentOS/Ubuntu/Nessus co...
CVE-2005-1261
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message IM with a large URL...
CVE-2005-1261: Undefined Security Weakness
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message IM with a large URL...
CVE-2005-0554
Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a URL with a long hostname, aka "URL Parsing Memory Corruption Vulnerability."...
GNU oSIP SIP voice protocol library buffer overflow
Heap overflow on URL parsing...
libxml2 multiple buffer overflows
Buffer overflow on URL parsing, name resolution...
libxml -- remote buffer overflows
infamous41md reports that libxml contains multiple buffer overflows in the URL parsing and DNS name resolving functions. These vulnerabilities could lead to execution of arbitrary code...
[Full-Disclosure] iDEFENSE Security Advisory 06.10.04: Real Networks RealPlayer URL Parsing Buffer Overflow Vulnerability
Real Networks RealPlayer URL Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.10.04 www.idefense.com/application/poi/display?id=109&type=vulnerabilities June 10, 2004 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetworks Inc. Fo...
MPlayer buffer overflow
Buffer overflows during URL parsing...
AOL Instant Messanger buffer overflow
Buffer overflow in screenname parameter during aim: URL parsing...
bestbuy.txt
Title: URL Parsing and Plain Text Password disclosure in Best Buy Employee Toolkit Software Provided by: cm cmthemcatyahoo.com ---------------- Best Buy Employee Toolkit Interactive is a software program used nationally by Best Buy Terminal Systems. The software allows employees the ability to...
Apache Jakarta Tomcat 3 URL parsing vulnerability
OVERVIEW ======== Tomcat is a JSP/Servlet implementation developed at the Apache Software Foundation. Tomcat versions 3.3.1 and earlier contain some security vulnerabilities which allow a remote user to retrieve listings of directories despite index.html or index.jsp files. It is also possible to...
Multiple bugs in Apache for Windows
Multiple bugs during URL parsing...
CVE-2002-1286
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the...
CVE-2002-1286: Undefined Security Weakness
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the...
Buffer overflow in Netscape/Mozilla
Buffer overflow on irc:// URL parsing...
KPMG-2002016: Bea Weblogic incorrect URL parsing issues
-------------------------------------------------------------------- Title: Bea Weblogic incorrect URL parsing issues BUG-ID: 2002016 Released: 30th Apr 2002 -------------------------------------------------------------------- Problem: ======== The Bea Weblogic server incorrectly parses certain...
Sambar Server 5.1 - Script Source Disclosure
source: https://www.securityfocus.com/bid/4533/info An issue has been discovered in Sambar Server, which could allow a user to reveal the source code of script files. Submitting a request for a known script file along with a space and null character %00, will successfully bypass the serverside UR...