Lucene search
+L

421 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/09/24 12:00 a.m.•6 views

CVE-2004-0903: Undefined Security Weakness

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing...

10CVSS6.8AI score0.09748EPSS
SaveExploits0References1
Gentoo Linux
Gentoo Linux
•added 2004/09/20 12:00 a.m.•72 views

Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities

Background Mozilla is a popular web browser that includes a mail and newsreader. Epiphany is a web browser that uses Gecko, the Mozilla rendering engine. Mozilla Firefox and Mozilla Thunderbird are respectively the next-generation browser and mail client from the Mozilla project. Description...

10CVSS7.1AI score0.10139EPSS
SaveExploits3
CERT
CERT
•added 2004/09/17 12:00 a.m.•32 views

Mozilla Mail vulnerable to buffer overflow via "writeGroup()" function in "nsVCardObj.cpp"

Overview Mozilla Mail contains a vulnerability in the display routines for VCards. By sending an email message with a crafted VCard, a remote attacker may be able to execute arbitrary code on the victim's machine with the privileges of the current user. Description Mozilla Mail contains a stack...

8.1AI score
SaveExploits0References5
FreeBSD
FreeBSD
•added 2004/09/13 12:00 a.m.•48 views

mozilla -- vCard stack buffer overflow

Georgi Guninski discovered a stack buffer overflow which may be triggered when viewing email messages with vCard attachments...

10CVSS6.9AI score0.09748EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/09/01 12:00 a.m.•4 views

CVE-2003-0103: Undefined Security Weakness

Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service crash, lockup, or restart via a Multi-Part vCard with fields containing a large number of format string specifiers...

5CVSS5.8AI score0.01743EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2004/03/18 12:00 a.m.•41 views

Vcard 2.8 uninstall script problem

Informations : °°°°°°°°°°°°°° Procduct: Vcard Version : 2.9 may other VER Problems : File uninstall & delete the table PHP Code/Location : °°°°°°°°°°°°°°°°°°° /admin/uninstall.php : ------------------------------------------------------------------------ ... ? $step = $HTTPGETVARS'step'; if...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2004/01/14 1:10 p.m.•12 views

security flaw

Buffer overflow in the VCF file information reader for KDE Personal Information Management kdepim suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file...

7.5CVSS6.2AI score0.06151EPSS
SaveExploits0References4
NVD
NVD
•added 2003/03/07 5:00 a.m.•24 views

CVE-2003-0103

Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service crash, lockup, or restart via a Multi-Part vCard with fields containing a large number of format string specifiers...

5CVSS6.6AI score0.01743EPSS
SaveExploits0References2
NVD
NVD
•added 2001/05/03 4:00 a.m.•27 views

CVE-2001-0145

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...

7.5CVSS7.6AI score0.06699EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2001/04/04 4:00 a.m.•56 views

CVE-2001-0145

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...

7.6AI score0.06699EPSS
SaveExploits0References2
CVE
CVE
•added 2001/04/04 4:00 a.m.•81 views

CVE-2001-0145

CVE-2001-0145 affects Outlook 2000/98 and Outlook Express 5.x, where a buffer overflow in the VCard handler can be triggered by a malformed vCard birthday field, allowing an attacker to execute arbitrary commands. The root cause described is a faulty VCard birthday parsing leading to memory corru...

7.5CVSS8AI score0.06699EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
•added 2001/04/04 4:00 a.m.•22 views

EUVD-2001-0145

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...

7.5CVSS7.6AI score0.06699EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/04/04 12:00 a.m.•6 views

CVE-2001-0145: Undefined Security Weakness

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...

7.5CVSS6.3AI score0.06699EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2001/03/11 12:00 a.m.•35 views

Дырка в Outlook при работе с бизнесс-картами.

Длинные поля в vCard приводят к переполнению буфера...

0.8AI score
SaveExploits0References3Affected Software2
securityvulns
securityvulns
•added 2001/03/11 12:00 a.m.•43 views

Security Advisory: Microsoft Outlook 2000 vCard Buffer Overrun (additional information) - Revised

-- Corsaire Limited Security Advisory -- Title: Microsoft Outlook 2000 vCard Buffer Overrun additional information - Revised Date: 01.03.01 Application: Outlook 2000, Outlook Express Environment: WinNT, Win2000 Author: Martin O'Neal [email protected] Audience: General distribution -- Scop...

6.9AI score
SaveExploits0
securityvulns
securityvulns
•added 2001/02/23 12:00 a.m.•48 views

Security Bulletin MS01-012

---------------------------------------------------------------------- Title: Outlook, Outlook Express Vcard Handler Contains Unchecked Buffer Date: 22 February 2001 Software: Outlook, Outlook Express Impact: Run code of attacker's choice Bulletin: MS01-012 Microsoft encourages customers to...

0.3AI score
SaveExploits0
NVD
NVD
•added 2000/10/20 4:00 a.m.•30 views

CVE-2000-0756

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard .vcf files, which allows attackers to cause a denial of service...

5CVSS6.4AI score0.05149EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2000/09/21 4:00 a.m.•46 views

CVE-2000-0756

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard .vcf files, which allows attackers to cause a denial of service...

6.4AI score0.05149EPSS
SaveExploits0References2
CVE
CVE
•added 2000/09/21 4:00 a.m.•79 views

CVE-2000-0756

CVE-2000-0756 affects Microsoft Outlook 2000, where the application does not properly process long or malformed vCard (.vcf) fields, enabling a denial of service. The root cause is improper handling of vCard fields during parsing. The available documents do not provide exploitable details, proof-...

5CVSS6.8AI score0.05149EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/09/21 12:00 a.m.•5 views

CVE-2000-0756: Undefined Security Weakness

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard .vcf files, which allows attackers to cause a denial of service...

5CVSS5.7AI score0.05149EPSS
SaveExploits0References1
Rows per page
Query Builder