123 matches found
VMware View 3.1.x - URL Processing Cross-Site Scripting
VMware View 3.1.x - URL Processing Cross-Site Scripting source: https://www.securityfocus.com/bid/39949/info VMware View is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...
ffdshow Codec Media Stream URL Processing Buffer Overflow (CVE-2008-5381)
ffdshow is a popular all-in-one codec for many video and audio file and stream formats, including Xvid, H.264, MPEG, AAC, Vorbis, AC3, DTS and others. It is an open source software released under the terms of GNU General Public License version 2 and is implemented as directShow filter and VFW...
Orbit Downloader Download Argument Processing Stack Buffer Overflow (CVE-2008-1602)
There exists a buffer overflow vulnerability in Orbit Downloader. The vulnerability is caused due to insufficient boundary checking when the application processes the URL string. An attacker may exploit this vulnerability by enticing a target user to open a malicious long URL. Successful...
Apple iTunes Protocol Handler Stack Buffer Overflow (CVE-2009-0950)
Apple iTunes is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files. When iTunes is installed, it registers itself with the host Operating System as a protocol handler for several application URL schemes. A buffer overflow...
Green Dam 3.17 URL Processing Buffer Overflow Exploit (meta)
Exploit for windows platform in category remote exploits ============================================================ Green Dam 3.17 URL Processing Buffer Overflow Exploit meta ============================================================ greendamurl.rb Green Dam URL Processing Buffer Overflow...
thunderbird security update
CentOS Errata and Security Advisory CESA-2009:0002 Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a...
Moderate: Red Hat Security Advisory: thunderbird security update
Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws...
RedHat Security Advisory RHSA-2009:0002
The remote host is missing updates announced in advisory RHSA-2009:0002. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...
RedHat Security Advisory RHSA-2009:0002
The remote host is missing updates announced in advisory RHSA-2009:0002. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...
RHEL 4 / 5 : firefox (RHSA-2008:1036)
An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...
CVE-2008-5381
Buffer overflow in the URL processing in ffdshow aka ffdshow-tryout before SVN revision 2347 allows remote attackers to execute arbitrary code via a long URL...
Buffer overflow
Buffer overflow in the URL processing in ffdshow aka ffdshow-tryout before SVN revision 2347 allows remote attackers to execute arbitrary code via a long URL...
CVE-2008-5381
CVE-2008-5381 is a buffer overflow in the URL processing of ffdshow (ffdshow-tryout) for Windows. The flaw exists in versions prior to SVN revision 2347, and an attacker could exploit it by tricking a user to view a long URL, potentially allowing remote code execution with the user’s privileges. ...
CVE-2008-5381
Buffer overflow in the URL processing in ffdshow aka ffdshow-tryout before SVN revision 2347 allows remote attackers to execute arbitrary code via a long URL...
Orbit Downloader URL处理栈溢出漏洞
BUGTRAQ ID: 28541 CVECAN ID: CVE-2008-1602 Orbit Downloader是用于从视频共享网站下载流媒体的下载管理器。 Orbit downloader没有正确地将URL ASCII字符串转换为Unicode，如果用户从特制的URL下载了文件的话就可能导致执行任意指令。 如果Orbit无法下载文件的话，就会在通知区域弹出气球控制： /----------- .text:004A56D0 sub4A56D0 proc near ; CODE XREF: sub42AAC0+321 p .text:004A56D0 ; sub439610+321 ...
Mozilla Firefox / Thunderbird URL processing code execution
It's possible to inject shell characters into mailto:, news:, nntp: IRLs if Thunderbird is used as URL handler...
Trillian multiple security vulnerabilities
Buffer overflow and unfiltered shell characters on aim:// URL processing...
CVE-2002-2216
CVE-2002-2216 affects Soft3304 04WebServer prior to 1.20. The issue is a flaw in how URL strings are processed, enabling remote attackers to obtain unspecified sensitive information. The connected documents do not provide a concrete fix or remediation steps. No exploitation details are documented...