CVE-2011-5172

CVE-2011-5172 affects StoryBoard Quick 6 Build 3786 (and possibly StoryBoard Artist/Studio). The issue is a stack-based buffer overflow in the handling of the string element field in a frame XML file, allowing remote attackers to execute arbitrary code. Exploitation details are not provided in th...

CVE-2011-5172: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, allows remote attackers to execute arbitrary code via a long string in the string element field in a frame xml file...

CVE-2012-4864

Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted xml file...

Memory corruption

Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted xml file...

CVE-2012-4864

Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted xml file...

CVE-2012-4864

Oreans WinLicense 2.1.8.0 is affected. A crafted XML file can trigger memory corruption, leading to remote denial of service and potentially arbitrary code execution. The available documents do not provide concrete exploit details, specific vulnerable vectors, affected OS versions, or remediation...

CVE-2012-4864: Improper Control of Generation of Code

Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted xml file...

PT-2012-5616

Name of the Vulnerable Software and Affected Versions Oreans WinLicense version 2.1.8.0 Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and crash, and possibly execute arbitrary code via a crafted xml file. Recommendations For Oreans...

Scientific Linux Security Update : PyXML on SL4.x, SL5.x i386/x86_64

A buffer over-read flaw was found in the way PyXML's Expat parser handled malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause Python applications using PyXML's Expat parser to crash while parsing the file. CVE-2009-3720 This update makes PyXML use the...

Scientific Linux Security Update : python on SL4.x, SL5.x i386/x86_64

A flaw was found in the Python urllib and urllib2 libraries where they would not differentiate between different target URLs when handling automatic redirects. This caused Python applications using these modules to follow any new URL that they understood, including the 'file://' URL type. This...

CVE-2012-2196

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the 1 GETWRAPCFGC or 2 GETWRAPCFGC2 stored procedure...

CVE-2012-2196

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the 1 GETWRAPCFGC or 2 GETWRAPCFGC2 stored procedure...

CVE-2012-2196: Exposure of Sensitive Information to an Unauthorized Actor

IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote attackers to read arbitrary XML files via the 1 GETWRAPCFGC or 2 GETWRAPCFGC2 stored procedure...

Lattice Diamond Programmer Buffer Overflow

Exploit for windows platform in category dos / poc Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL: http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow Date...

Lattice Diamond Programmer 1.4.2 - Buffer Overflow (PoC)

Lattice Diamond Programmer 1.4.2 - Buffer Overflow PoC Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...

PT-2014-2245

Name of the Vulnerable Software and Affected Versions sblim-cim-client2 versions prior to 2.1.12 Description The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption, through a crafted XML file. This is due to the computation of hash values without...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : libxml2 vulnerability (USN-1447-1)

Juri Aedla discovered that libxml2 contained an off by one error in its XPointer functionality. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the...

Apple QuickTime TeXML Style Element Stack Buffer Overflow

This module exploits a vulnerability found in Apple QuickTime. When handling a TeXML file, it is possible to trigger a stack-based buffer overflow, and then gain arbitrary code execution under the context of the user. This is due to the QuickTime3GPP.gtx component not handling certain Style...

NGS00141 Technical Advisory: Websense Triton 7.6 stored XSS in report management UI

======= Summary ======= Name: Websense Triton 7.6 stored XSS in report management UI Release Date: 30 April 2012 Reference: NGS00141 Discoverer: Ben Williams [email protected] Vendor: Websense Vendor Reference: Systems Affected: Risk: High Status: Published ======== TimeLine ========...

Autonomy Connected Backup Type 13 Command Injection (CVE-2011-2397)

A code execution vulnerability has been reported in Autonomy Connected Backup. The vulnerability is due to insufficient validation of certain commands by the Agent.exe process. A remote attacker may exploit this issue by sending a specially crafted XML file to the affected system. Successful...