CVE-2006-2378

Buffer overflow in the ART Image Rendering component jgdw400.dll in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption...

CVE-2006-2378

CVE-2006-2378 is a heap-based buffer overflow in the ART Image Rendering component (jgdw400.dll) used by AOL ART images in Microsoft Windows XP (SP1/SP2), Windows Server 2003 (SP1), and older/related OSes (including 98/Me). A crafted ART image can cause heap corruption, enabling remote code execu...

CVE-2006-2378

Buffer overflow in the ART Image Rendering component jgdw400.dll in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption...

Microsoft Security Bulletin MS06-022 Vulnerability in ART Image Rendering Could Allow Remote Code Execution (918439)

Microsoft Security Bulletin MS06-022 Vulnerability in ART Image Rendering Could Allow Remote Code Execution 918439 Published: June 13, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Ratin...

Microsoft Windows ART image handling buffer overflow

Overview Microsoft Windows ART image handling routines are vulnerable to a heap-based buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description ART Images According to Microsoft Security Bulletin MS06-022: ART is...

Microsoft Windows Malformed ART Image Remote Code Execution Vulnerability

Description Microsoft Windows is prone to remote code execution when processing malformed AOL ART images. This issue is exposed when the malicious images are processed by Internet Explorer or other applications that rely on Internet Explorer to display AOL ART images. If exploited, this...

0verkill 0.16 - ASCII-ART Game Remote Integer Overflow Crash (PoC)

0verkill 0.16 - ASCII-ART Game Remote Integer Overflow Crash PoC !/usr/bin/env python ----------------------------------------------------- Exploit id: FSE:016 Author: Federico Fazzi Contact: [email protected] Date: 09/06/2006, 13:58 Sinthesis: 0verkill 0.16, Remote integer overflow Product:...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4686

PunBB 1.2.9 (often with F-ART BLOG:CMS) includes config.php before calling unregister_globals, enabling exposure of unspecified sensitive information. Root cause: premature/configuration sequencing in the initialization flow. Impact is limited to information disclosure; no explicit vector or expl...

CVE-2005-4687

PunBB 1.2.9 (used standalone or with F-ART BLOG:CMS) trusts the client IP from the X-Forwarded-For header instead of the TCP/IP stack, enabling IP address spoofing by remote attackers. Red Hat and CVE records corroborate this vulnerability in PunBB 1.2.9. The underlying issue is header-based IP e...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...

CVE-2005-4486

SQL injection vulnerability in Quantum Art QP7.Enterprise formerly Q-Publishing allows remote attackers to execute arbitrary SQL commands via the pnewsid parameter to 1 newsandeventsnew.asp and 2 news.asp. NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the pnewsid...

CVE-2005-4486

CVE-2005-4486 concerns SQL injection in Quantum Art QP7.Enterprise (formerly Q-Publishing). The vulnerability allows remote attackers to manipulate SQL via the p_news_id parameter on endpoints such as news_and_events_new.asp and news.asp . The vendor disputed the report’s accuracy in 2006, noting...

CVE-2005-4486

SQL injection vulnerability in Quantum Art QP7.Enterprise formerly Q-Publishing allows remote attackers to execute arbitrary SQL commands via the pnewsid parameter to 1 newsandeventsnew.asp and 2 news.asp. NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the pnewsid...

PT-2005-5169 · Quantum Art · Quantum Art Qp7.Enterprise

Name of the Vulnerable Software and Affected Versions: Quantum Art QP7.Enterprise affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p news id parameter to API endpoints such as "news and events...

Quantum Art QP7.Enterprise - news.asp?p_news_id SQL Injection

Quantum Art QP7.Enterprise - news.asp?pnewsid SQL Injection source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

Quantum Art QP7.Enterprise - 'news.asp?p_news_id' SQL Injection

source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromis...

Quantum Art QP7.Enterprise - 'news_and_events_new.asp?p_news_id' SQL Injection

source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromis...

Quantum Art QP7.Enterprise - news_and_events_new.asp?p_news_id SQL Injection

Quantum Art QP7.Enterprise - newsandeventsnew.asp?pnewsid SQL Injection source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usin...