CVE-2009-3918: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title...

SA-CONTRIB-2009-098 - Zoomify - Cross Site Scripting

The Zoomify module integrates the Zoomify Flash applet into Drupal which can be used to pan and zoom on large images. Images are first preprocessed in order for Zoomify to work. The module fails to sanitize a value in the node title, leading to a Cross Site Scripting XSS vulnerability. Versions...

CVE-2007-2920

Multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control in ZActiveX.dll might allow remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

Multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control in ZActiveX.dll might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-2920

CVE-2007-2920 concerns multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control (ZActiveX.dll). The Nessus/NASL entry and CERT briefing confirm that remote attackers could potentially execute arbitrary code by tempting a user to visit a crafted page, with exploitation tied to t...

CVE-2007-2920: Undefined Security Weakness

Multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control in ZActiveX.dll might allow remote attackers to execute arbitrary code via unspecified vectors...