2553 matches found
CVE-2006-6236
Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...
PT-2006-6440 · Rhadrix · Rhadrix If-Cms
Name of the Vulnerable Software and Affected Versions: Rhadrix If-CMS versions 1.01 through 2.07 Description: The issue allows remote attackers to obtain the full path of the web server. This is achieved by providing empty arguments, specifically rns or pag, which results in an error message that...
HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation
/ HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S" optional arguement. 'swmodify' is...
eIQNetworks ESA Topology DELETEDEVICE Overflow
This module exploits a stack buffer overflow in eIQnetworks Enterprise Security Analyzer. During the processing of long arguments to the DELETEDEVICE command in the Topology server, a stack-based buffer overflow occurs. This module has only been tested against ESA v2.1.13. This module requires...
CVE-2006-4262
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via multiple vectors including 1 a long pathname that is not properly handled during file list parsing, 2 long pathnames that result from path...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution
Exploit for hardware platform in category remote exploits =========================================================== Barracuda Spam Firewall = 3.3.03.053 Remote Code Execution =========================================================== Title: Barracuda Arbitrary File Disclosure + Command Executi...
tiffsplit buffer overflow
Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a common scenario under which tiffsplit is called with attacker-controlled command line...
security flaw
Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...
CVE-2006-3806
Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...
Rocks Clusters <=4.1 local root
direct link: http://xavier.tigerteam.se/advisories/TSEAD-200606-6.txt tigerteam.se security advisory - TSEAD-200606-6 www.tigerteam.se Advisory: Rocks Clusters =4.1 local root vulnerabilities Date: Wed Jul 5 15:52:59 EDT 2006 Application: mount-loop, umount-loop Vulnerability: Lack of filtering o...
Path traversal
Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to 1 layout/professional/functions.php or 2 getimage.php...
Buffer overflow
Buffer overflow in the tellplayersurrchanges function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments...
SKYPE-SB/2006-001: Improper handling of URI arguments
SKYPE-SB/2006-001: Improper handling of URI arguments Bulletin title: Improper handling of URI arguments Bulletin ID: SKYPE-SB/2006-001 Bulletin status: FINAL Date of announcement: 2006-05-19 08:00:00 +0000 Products affected: Skype for Windows Vulnerability type: Argument handling CVE references:...
Design/Logic Flaw
Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an...
Design/Logic Flaw
Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary...
CVE-2006-2058
Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as ...
CVE-2006-2056
CVE-2006-2056 affects Internet Explorer 6 on Windows XP SP2. The vuln is an argument-injection flaw where an attacker can influence command line arguments passed to a launched mail client via double-quote characters in a mailto: handler, demonstrated by starting Outlook with an arbitrary attachme...
CVE-2006-2057
The CVE-2006-2057 issue affects Mozilla Firefox 1.0.6. It describes an argument injection vulnerability where user-assisted attackers could alter command line arguments of an invoked mail client via double-quote characters in a mailto: handler, demonstrated by launching Outlook with an arbitrary ...
PT-2006-3037 · Microsoft · Outlook +2
Name of the Vulnerable Software and Affected Versions: Internet Explorer 6 for Windows XP SP2 Description: The issue allows remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler. This can be demonstrated by launching...
Format string
Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...