Yahoo! Toolbar yt.ythelper.2 ActiveX控件栈溢出漏洞

BUGTRAQ ID: 26656 CVECAN ID: CVE-2007-6228 Yahoo! Toolbar是一个IE插件，能够通过嵌入IE的工具栏帮助快速使用Yahoo搜索引擎、收发Yahoo电子邮件等操作。 Yahoo! Toolbar的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Yahoo! Toolbar所安装的yt.ythelper.2 ActiveX控件没有正确地验证对c方式所传送的参数，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发栈溢出，导致浏览器崩溃或执行任意指令。 Yahoo! Toolbar 1.4....

[USN-1273-1] Pidgin vulnerabilities

========================================================================== Ubuntu Security Notice USN-1273-1 November 21, 2011 pidgin vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu Update for pidgin USN-1273-1

Ubuntu Update for Linux kernel vulnerabilities USN-1273-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12731.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for pidgin USN-1273-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 10.04 LTS / 10.10 / 11.04 : pidgin vulnerabilities (USN-1273-1)

Marius Wachtler discovered that Pidgin incorrectly handled malformed YMSG messages in the Yahoo! protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 10.04 LTS and 10.10. CVE-2011-1091...

USN-1273-1: Pidgin vulnerabilities

Marius Wachtler discovered that Pidgin incorrectly handled malformed YMSG messages in the Yahoo! protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 10.04 LTS and 10.10. CVE-2011-1091...

Yahoo! Small Business Directory Traversal

======================================== Yahoo! smallbusiness Directory Traversal ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0 '---' --' --' ' -'--'---| 1 1 ; 0 0...

CentOS Update for finch CESA-2011:1371 centos4 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2011:1371 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

NJStar Communicator 3.00 MiniSMTP Buffer Overflow

This module exploits a stack buffer overflow vulnerability in NJStar Communicator Version 3.00 MiniSMTP server. The MiniSMTP application can be seen in multiple NJStar products, and will continue to run in the background even if the software is already shutdown. According to the vendor's...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2011:1371 Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVS...

Pidgin: Multiple NULL pointer dereference flaws in Yahoo protocol plug-in

libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows 1 remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a malformed YMSG notification packet, and allows 2 remote Yahoo! servers to cause a denial of...

Droidsheep : Android Application for Session Hijacking

Droidsheep : Android Application for Session Hijacking Droidsheep is free alternate of faceniff which is available on download droidsheep website for free. Its one click hijacking tool which supports Amazon.de facebook.com flickr.com twitter.com linkdein.com yahoo.com live.com google.de only the...

YieldManager Ad Network Serving Malvertising

One of the world’s largest advertising networks, YieldManager, has been serving ransomware to websites from all over the world. The malvertising campaign was first detected by Armorize’s HackAlert scanning farm. While the websites affected are international, the exploit server itself, at the...

Dutch Site Claims Mozilla, Yahoo, WordPress, Tor Project All Targets in DigiNotar Attack

There are more signs that a July compromise of DigiNotar, a certificate authority based in the Netherlands, may have been driven by political motives. A Dutch Web site, nu.nl, reported on Wednesday that digital certificates belonging to Mozilla, Yahoo.com, WordPress and The Tor Project were among...

yahoo! player 1.5 (.m3u) Universal Buffer Overflow (SEH)

Exploit for windows platform in category local exploits !/usr/bin/perl Exploit Title: yahoo! player 1.5 .m3u Universal Buffer Overflow SEH Date: 27/08/2011 Author: D3r K0n!G Software Link: http://www.clubic.com/lancer-le-telechargement-8059-0-yahoo-player.html Version: 1.5.01.409 Tested on: Windo...

Yahoo! player 1.5 - '.m3u' Universal Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: yahoo! player 1.5 .m3u Universal Buffer Overflow SEH Date: 27/08/2011 Author: D3r K0n!G Software Link: http://www.clubic.com/lancer-le-telechargement-8059-0-yahoo-player.html Version: 1.5.01.409 Tested on: Windows XP SP3 CVE : N/A Greets to: All my frends DZ & all...

CentOS Update for finch CESA-2009:1139 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2009:1139 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for finch CESA-2010:0788 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2010:0788 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for finch CESA-2009:1139 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Yahoo! Messenger Detection

Binary data 5980.prm...

Yahoo Mail - Cross Site Scripting & Webfilter Bypass

Document Title: =============== Yahoo Mail - Cross Site Scripting & Webfilter Bypass Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 130 Product & Service Introduction: =============================== Enjoy tons of features and fun wa...