Rediff Bol 7.0 Instant Messenger ActiveX Control Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerable user's Windows Address Book. script v...

ASPR #2010-12-14-1: Remote Binary Planting in Windows Address Book

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-12-14-1 ------------------------------------------------------------------------- ASPR 2010-12-14-1: Remote Binary Planting in Windows Address Book...

Fichier Carnet d'adresses (Windows Address Book -wab.exe) DLL Hijacking

Exploit for windows platform in category local exploits ======================================================================= Fichier Carnet d'adresses Windows Address Book -wab.exe DLL Hijacking =======================================================================...

CVE-2010-3147

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll...

Design/Logic Flaw

Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll...

CVE-2010-3147

CVE-2010-3147 describes an untrusted search path vulnerability in Windows Address Book (wab.exe) where a Trojan horse wab32res.dll loaded from the current working directory can execute code. Affected: WAB/Windows Contacts components on Windows XP SP2/XP SP3, Server 2003 SP2, Vista SP1/SP2, Server...

PT-2010-4592 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Windows Address Book version 6.00.2900.5512 in Microsoft Windows XP SP2 and SP3 Windows Address Book in Windows Server 2003 SP2 Windows Address Book in Windows Vista SP1 and SP2 Windows Address Book in Windows Server 2008 Gold, SP2, and R2...

CVE-2006-2386

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

Code injection

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

CVE-2006-2386

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

WAB Files (CVE-2006-2386)

Windows Address Book WAB is a component of Microsoft Windows operating systems that lets users keep a single list of contacts that can be shared by multiple programs. It is most commonly used by Microsoft Outlook Express. The vulnerability is due to a buffer overflow error in the Windows Address...

Microsoft Internet Explorer / Outlook Express multiple security vulnerabilities

Memory corruption on Javascript errors processing and Javascript normalize function. Temporary Internet Files crossite access. Buffer overflow on Windows Address Book WAB parsing...

Block Windows Address Book Contact Record Vulnerability (MS06-076)

A remote code execution vulnerability has been discovered in Microsoft Outlook Express. The vulnerability is due to a buffer overflow error in the Windows Address Book WAB functions within Outlook Express. Windows Address Book is an application used for storing contact information. A remote...

Microsoft Outlook Express Windows Address Book Contact Record Remote Code Execution Vulnerability

Description Microsoft Outlook Express is prone to a remote code-execution vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. A remote attacker can exploit this issue to execute arbitrary code with the privileges of...

CVE-2006-0014

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

Buffer overflow

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability

ZDI-06-007: Microsoft Windows Address Book WAB File Format Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-007.html April 11, 2006 -- CVE ID: CVE-2006-0014 -- Affected Vendor: Microsoft -- Affected Products: Windows XP SP2 Windows 2000 SP4 -- TippingPointTM IPS Customer...

CVE-2006-0014

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

MS06-016: Vulnerability in Outlook Express Could Allow Remote Code Execution (911567)

The remote host is running a version of Microsoft Outlook Express that may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed Windows Address Book .wab file to a victim on the remote host and have him open the file. C...

Microsoft Outlook Express Windows Address Book File Parsing Buffer Overflow Vulnerability

Description Microsoft Outlook Express is prone to a remote buffer-overflow vulnerability. This vulnerability presets itself when the application processes a specially crafted Windows Address Book .wab file. An attacker may exploit this issue to execute arbitrary code in the context of a user...