PeerCast 0.1216 (Windows x86) - URL Handling Buffer Overflow (Metasploit)

$Id: peercasturl.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2010-1752

Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to URL handling...

Stack overflow

Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to URL handling...

CVE-2010-1752

CVE-2010-1752 is a CFNetwork stack overflow in iOS (Apple) URL handling, affecting iOS before 4 on iPhone/iPod touch. The vulnerability allows remote attackers to cause a crash or execute arbitrary code via crafted web content. Connected sources (Apple security advisories HT4225/HT4435) indicate ...

CVE-2010-1752

Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to URL handling...

PT-2010-3390 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4 Description: A stack-based buffer overflow issue in CFNetwork allows remote attackers to execute arbitrary code or cause a denial of service, specifically an application crash, via vectors related to URL handling...

Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly

Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly ---------------------------------------------------------------------------- Help and Support Centre is the default application provided to access online documentation for Microsoft Windows. Microsoft supports accessing...

Google Chrome 5.0.375.55更新修复多个安全漏洞

BUGTRAQ ID: 40367 CVE ID: CVE-2010-2105,CVE-2010-2106,CVE-2010-2107,CVE-2010-2108,CVE-2010-2109,CVE-2010-2110 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.55版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致绕过安全限制或完全入侵用户系统。 1 Chrome没有正确地遵循对规范化URL的Safe Browsing规范。 2 上传事件处理器实现中的错误可能导致伪造URL栏。 3 Safe...

Lotus iNotes ActiveX控件URL处理栈溢出漏洞

BUGTRAQ ID: 38457 CVECAN ID: CVE-2010-0919 Lotus iNotes之前被称为Lotus Domino Web Access，是Lotus Domino服务器基于web的消息和协作界面。 Domino Web Access ActiveX控件（dwa8.dll，dwa8w.dll）在处理URL时没有执行长度检查便将其拷贝到了固定大小的栈缓冲区中，用户受骗访问了恶意网页并传送了超长参数的话就可以触发栈溢出，导致执行任意代码。 IBM Lotus iNotes 8.0 IBM Lotus iNotes 7.0 IBM Lotus iNotes 6.5...

Information disclosure

Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking a user into...

CVE-2010-0657

Removed by vendor...

Insomnia : ISVA-100216.1 - Windows URL Handling Vulnerability

Insomnia Security Vulnerability Advisory: ISVA-100216.1 Name: Windows URL Handling Vulnerability Released: 16 February 2010 Vendor Link: http://www.microsoft.com/ Affected Products: Windows 2000, Windows XP, Windows 2003, Windows Vista Original Advisory:...

[SECURITY] [DSA 1873-1] New xulrunner packages fix spoofing vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1873-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 26, 2009 http://www.debian.org/security/faq -...

Google Chrome DoS

Hang on chromehtml: URL handling...

Symantec杀毒软件Reporting Server组件URL处理漏洞

BUGTRAQ ID: 34668 CVECAN ID: CVE-2009-1432 Symantec AntiVirus是非常流行的杀毒解决方案。 Reporting Server是Symantec杀毒软件产品中所使用的用于创建有关企业网络中Symantec杀毒产品报表的可选组件。Reporting Server组件的登录屏幕存在URL处理错误，如果用户受骗跟随了恶意链接就会导致在登录屏幕上显示误导性消息，这有助于攻击者执行网络钓鱼类的欺骗攻击。 Symantec Client Security 3.1 Symantec AntiVirus Corporate Edition 10.2...

Symantec Reporting Server Improper URL Handling Exposure

The remote host is running Symantec Reporting Server, a component of Symantec AntiVirus Corporate Edition, Symantec Client Security, and Symantec Endpoint Protection Manager that serves to create reports about the use of Symantec antivirus products in an enterprise environment. The installed...

Design/Logic Flaw

Symantec Reporting Server, as used in Symantec AntiVirus SAV Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security SCS before 3.1 MR8, and the Symantec Endpoint Protection Manager SEPM component in Symantec Endpoint Protection SEP before 11.0 MR2, allows remote...

Symantec Reporting Server Improper URL Handling Exposure

SUMMARY The login web page in some versions of Symantec Reporting Server contains a URL handling error which could potentially allow an attacker to launch a phishing attack. AFFECTED PRODUCTS Product | Affected Version | Solution ---|---|--- Symantec AntiVirus Corporate Edition | 10.1 MR7 and...

CVE-2009-0356

Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the 1 about:plugins and 2 about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a...

Google Chrome Web Browser FTP Client XSS Vulnerability

The host is installed with Goole Chrome Web Browser and is prone to Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromeftpclntxssvuln.nasl 5657 2017-03-21 11:08:08Z cfi $ Google Chrome Web Browser FTP Client XSS Vulnerability Authors: Veerendra GG Copyright:...