1504 matches found
PT-2009-5966 · Vmware · Vmware Server +3
Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 7.0 through 7.0.0 before build 227600 VMware Workstation version 6.5.x through 6.5.3 before build 246459 VMware Player versions 3.0 through 3.0.0 before build 227600 VMware Player version 2.5.x through 2.5.3 before...
KLA10166 ACE vulnerability in FrontRange HEAT
An SQL injection vulnerability was found in FrontRange HEAT. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to Call Logging. Original advisories - Related products FrontRange-HEAT CVE list CVE-2009-3642...
CVE-2009-3457
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
Information disclosure
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
CVE-2009-3457
Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) prior to version 6.1 are affected by an information-disclosure vulnerability. An HTTP request that lacks a handler (e.g., an OPTIONS request or a crafted GET request) can trigger a Message-handling Errors message that exposes a cl...
CVE-2009-3457
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
+------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...
Cisco应用控制引擎(ACE) XML网关IP地址信息泄漏漏洞
Bugraq ID: 36522 Cisco ACE XML网关是Cisco应用控制引擎ACE家族产品的重要组件。 Cisco ACE XML网关缺少正确的错误处理管理，远程攻击者可以利用漏洞获得内部IP信息。 Cisco ACE XML网关在不能正确找到请求相匹配的处理器时，会直接对客户端提供包含内部IP地址的错误消息应答。 相关的请求不仅仅限于OPTIONS请求类型，如果GET请求使用的路径没有相应的处理器配置，也同样泄漏内部IP地址信息。 Cisco Application Control Engine ACE XML Gateway 6.0 Cisco Application...
Cisco ACE XML Gateway information leakage
Internal address of server is leaked on some HTTP requests...
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
Exploit for unknown platform in category remote exploits =================================================== Cisco ACE XML Gateway = 6.0 Internal IP disclosure =================================================== Title: Cisco ACE XML Gateway = 6.0 Internal IP disclosure CVE-ID: OSVDB-ID: Author:...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
No description provided by source. +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure
+----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...
Memory corruption
The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video...
Heap overflow
Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows might allow remote attacke...
CVE-2009-2628
The CVE-2009-2628 issue affects VMware VMnc codec (vmnc.dll) used by VMware Movie Decoder and related products. The root cause is heap memory corruption triggered by AVI files with certain small heights, enabling remote code execution on Windows when processed by vulnerable VMnc-based components ...
CVE-2008-7144
WinRAR prior to 3.71 is affected by multiple unspecified vulnerabilities triggered by crafted archive formats (ACE, ARJ, BZ2, CAB, GZ, LHA, RAR, TAR, ZIP). The exact impact, vectors, and fixes are not detailed in the provided documents.
KLA10422 ACE vulnerability in ooVoo
A buffer overflow was found in ooVoo. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URI. Original advisories - Exploitation Public exploits exist for this...
VMSA-2007-0006 : Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player
Problems addressed by these patches : I Arbitrary code execution and denial of service vulnerabilities This release fixes a security vulnerability that could allow a guest operating system user with administrative privileges to cause memory corruption in a host process, and thus potentially execu...
KLA10033 Multiple ACE vulnerabilities in Adobe Acrobat & Reader
Multiple serious vulnerabilities have been found in Adobe Acrobat & Reader. getAnnots and customDictionaryOpen methods in JavaScript API can be exploited to cause denial of service or execute arbitrary code through a specially designed pdf file. Original advisories Adobe bulletin Exploitation...