EUVD-2005-0189

Malware in sbrugna...

EUVD-2005-0188

Malware in sbrugna...

CVE-2005-0187

Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name...

CVE-2005-0187

CVE-2005-0187 describes a stack-based buffer overflow in the SetSkin function of the AtHoc toolbar. The vulnerability allows remote attackers to execute arbitrary code by supplying a long skin name, indicating a remote code execution risk via the affected component. The documents identify the aff...

CVE-2005-0188

CVE-2005-0188 concerns a format-string vulnerability in the SetBaseURL function of the AtHoc toolbar. The issue allows remote attackers to execute arbitrary code by supplying an invalid URL that is recorded in the debug log, leveraging format specifiers. Public references in NVD/CVE records indic...

CVE-2005-0188

Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log...

Multiple AtHoc toolbar bugs

Buffer overflows, format string bugs in ActiveX components...

Multiple vulnerabilities in the AtHoc Toolbar (#NISR19012005c)

NGSSoftware Insight Security Research Advisory Name: Multiple Vulnerabilities in the AtHoc Toolbar For MSIE Systems Affected: AtHoc Toolbar for MSIE Severity: High Vendor URL: http://www.athoc.com/site/products/toolbar.asp Author: Mark Litchfield [email protected] John Heasman...

Patch available for high risk flaws in the AtHoc Toolbar

Mark Litchfield and John Heasman of NGSSoftware have discovered two high risk vulnerabilities in the AtHoc Toolbar. The AtHoc toolbar is a plugin for Microsoft's Internet Explorer. The toolbar is redistributed to users of eBay Accenture ThomasRegister ThomasRegional Juniper Networks WiredNews...

CVE-2005-0188

Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log...