1392 matches found
CVE-2005-0667
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message...
CVE-2005-0667: Undefined Security Weakness
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message...
sylpheed -- buffer overflow in header processing
The Sylpheed web site states: A buffer overflow which occurred when replying to a message with certain headers which contain non-ascii characters was fixed...
CVE-2005-0509
Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...
CVE-2005-0509
Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...
CVE-2004-1490: Undefined Security Weakness
Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces ASCII character code 160 in the 1 Content-Disposition or 2 Content-Type headers...
security flaw
Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...
RHEL 2.1 / 3 : enscript (RHSA-2005:039)
An updated enscript package that fixes several security issues is now available. GNU enscript converts ASCII files to PostScript. Enscript has the ability to interpret special escape sequences. A flaw was found in the handling of the epsf command used to insert inline EPS files into a document. A...
Multiple enscript ASCII to Postscript convertor vulnerabilities
Shell characters filtering problems, multiple buffer overflows...
security flaw
Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...
CVE-2004-0931
MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service crash via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function...
MaxDB DoS
Invalid non-ASCII characters handling in IsAscii7 function...
Service Detection: 3 ASCII Digit Code Responses
This plugin is a complement of findservice1.nasl. It attempts to identify services that return 3 ASCII digits codes ie: FTP, SMTP, NNTP, ... C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14773; scriptversion"1.60"; scriptsetattributeattribute:"pluginmodificationdate"...
Mozilla Browser 1.7.x - Non-ASCII Hostname Heap Overflow
Mozilla Browser 1.7.x - Non-ASCII Hostname Heap Overflow source: https://www.securityfocus.com/bid/11169/info Mozilla is prone to a remotely exploitable heap overflow that is exposed when the browser handles non-ASCII characters in URIs. This issue could be exploited by enticing a user to open a...
Mozilla Browser 1.7.x - Non-ASCII Hostname Heap Overflow
source: https://www.securityfocus.com/bid/11169/info Mozilla is prone to a remotely exploitable heap overflow that is exposed when the browser handles non-ASCII characters in URIs. This issue could be exploited by enticing a user to open a hyperlink that references a malicious URI. Successful...
CVE-2002-0986
CVE-2002-0986 corresponds to a PHP 4.x vulnerability where mail() did not filter ASCII control characters from arguments, allowing remote attackers to modify mail content including headers and potentially use the server as a spam proxy. The OpenVAS entries confirm the issue arises on PHP
CVE-2002-0986: Undefined Security Weakness
The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."...
AOL Instant Messenger ASCII-Symbol Interpretation Denial of Service
Binary data 1258.prm...