AA SMTP Server 1.1 - Crash (PoC)

AA SMTP Server 1.1 - Crash PoC ========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 Special thanks to : Ashwin...

AA SMTP Server 1.1 - Crash (PoC)

========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 Special thanks to : Ashwin Vamshi,Sid3^effects,r0073r...

Mandriva Update for xine-ui MDKSA-2007:027 (xine-ui)

Check for the Version of xine-ui OpenVAS Vulnerability Test Mandriva Update for xine-ui MDKSA-2007:027 xine-ui Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2009-0448: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the synTarget parameter...

CVE-2009-0135

CVE-2009-0135 affects Amarok 1.4.10–2.0.1 via integer overflow in Audible::Tag::readTag when parsing Audible Audio (.aa) tags, triggering a heap overflow and remote code execution. Multiple connected advisories (Mandriva MDVSA-2009:030-1, openSUSE amarok-436, Ubuntu USN-739-1, SUSE/Security updat...

CVE-2009-0136

The CVE-2009-0136 issue affects Amarok 1.4.10–2.0.1 through an insecure parsing path in Audible Audio (.aa) files. Specifically, multiple array index errors in Audible::Tag::readTag (metadata/audible/audibletag.cpp) can lead to an invalid pointer dereference or writing a 0x00 byte, after an alloc...

CVE-2009-0135: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio .aa file with a large 1 nlen or 2 vlen Tag value, each of which triggers a heap-based buffer...

CVE-2008-3492

CVE-2008-3492 affects America's Army (AA/Army Game Project) up to version 2.8.3.1. The vulnerability allows remote attackers to trigger a denial of service (assertion failure and daemon exit) by sending a crafted UDP packet, likely involving a VoiceIndex value outside VOICE_MAX_CHATTERS. Public s...

CVE-2006-6521: Undefined Security Weakness

SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter...

CVE-2006-6519: Undefined Security Weakness

SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands via the aa parameter...