ZDI-07-041: Panda Software AdminSecure Agent Heap Overflow Vulnerability

ZDI-07-041: Panda Software AdminSecure Agent Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-041.html July 24, 2007 -- CVE ID: CVE-2007-3026 -- Affected Vendor: Panda Software -- Affected Products: Panda AdminSecure 2006 -- TippingPointTM IPS Customer Protection:...

[Full-disclosure] ZDI-07-040: Symantec AntiVirus Engine CAB Parsing Heap Overflow Vulnerability

ZDI-07-040: Symantec AntiVirus Engine CAB Parsing Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-040.html July 12, 2007 -- CVE ID: CVE-2007-0447 -- Affected Vendor: Symantec -- Affected Products: Symantec AntiVirus Engine -- TippingPointTM IPS Customer Protection:...

[Full-disclosure] ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability

ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-039.html July 12, 2007 -- CVE ID: CVE-2007-3699 -- Affected Vendor: Symantec -- Affected Products: Symantec AntiVirus Engine -- TippingPointTM IPS Customer Protection:...

[Full-disclosure] ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability

ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-034.html June 5, 2007 -- CVE ID: CVE-2007-2863 -- Affected Vendor: Computer Associates -- Affected Products: CA Anti-Virus eTrust EZ Antivirus CA Internet...

Microsoft Excel Named Graph record buffer overflow

Added: 05/24/2007 CVE: CVE-2007-0215 BID: 23760 OSVDB: 34393 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow vulnerability in Microsoft Excel allows command execution when a user opens a speciall...

ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability

ZDI-07-030: Samba netdfsiodfsEnumInfod Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-030.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerability

ZDI-07-029: Samba lsaioprivilegeset Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-029.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability

ZDI-07-033: Samba lsaiotransnames Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-033.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability

ZDI-07-031: Samba smbionotifyoptiontypedata Heap Overflow Vuln http://www.zerodayinitiative.com/advisories/ZDI-07-031.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability

ZDI-07-032: Samba secioacl Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-032.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers ha...

ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability

ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-028.html May 9, 2007 -- CVE ID: CVE-2007-2522 -- Affected Vendor: Computer Associates -- Affected Products: eTrust AntiVirus Server v8 -- TippingPointTM IPS Customer...

ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability

ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-024.html May 7, 2007 -- CVE ID: CVE-2007-2508 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability

ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-026.html May 8, 2007 -- CVE ID: CVE-2007-0215 -- Affected Vendor: Microsoft -- Affected Products: Office Excel 2000 Office Excel 2002 Office Exce...

ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities

ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-07-022.html April 24, 2007 -- CVE ID: CVE-2007-2139 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 SP2 BrightSto...

ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability

ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-016.html April 18, 2007 -- CVE ID: CVE-2007-2170 -- Affected Vendor: Oracle -- Affected Products: Oracle E-Business Suite -- TippingPointTM IPS Customer Protection:...

ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability

ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability http://www.zerodayinitiative.com/advisories/ZDI-07-018.html April 18, 2007 -- CVE ID: CVE-2007-2137 -- Affected Vendor: IBM -- Affected Products: IBM Tivoli Monitoring Express 6.1 -- Vulnerability Details: This...

ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability

ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-021.html April 19, 2007 -- CVE ID: CVE-2007-0443 -- Affected Vendor: GraceNote -- Affected Products: CDDBControl ActiveX Control -- TippingPointTM IPS Customer Protection:...

ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability

ZDI-07-019: BMC Patrol PerformAgent bgssdservice Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-019.html April 18, 2007 -- CVE ID: CVE-2007-2136 -- Affected Vendor: BMC -- Affected Products: Patrol -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Critical: Red Hat Security Advisory: mod_jk security update

Updated modjk packages that fix a security issue are now available for Red Hat Application Server v2. This update has been rated as having critical security impact by the Red Hat Security Response Team. modjk is a Tomcat connector that can be used to communicate between Tomcat and the Apache HTTP...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...