iTunes < 7.4.0 MP4/AAC File covr atom Overflow

Binary data 4204.prm...

CVE-2007-3752: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

Atom PhotoBlog v1.0.9 XSS vulnerability

Application: Atom Photoblog Web Site: http://atomphotoblog.ilenvo.de/ Versions: 1.0.9 and below Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes Advisory File: http://www.secvsn.com/content/Advisories/sr-060607-atomphotoblog.html...

atomphotoblog-xss.txt

Application: Atom Photoblog Web Site: http://atomphotoblog.ilenvo.de/ Versions: 1.0.9 and below Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes Advisory File: http://www.secvsn.com/content/Advisories/sr-060607-atomphotoblog.html...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

CVE-2007-3134

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

Cross site scripting

Cross-site scripting XSS vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

CVE-2007-3134

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

CVE-2007-3135

Cross-site scripting XSS vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

CVE-2007-3135

CVE-2007-3135 is an XSS vulnerability affecting Atom Photoblog (versions 1.0.9 and earlier) in atomPhotoBlog.php. The tag parameter is injectable, enabling remote attackers to inject arbitrary web script or HTML. The vulnerability is documented across multiple sources (including NVD) with a base ...

CVE-2007-3134

CVE-2007-3134 affects Atom PhotoBlog

CVE-2007-3134: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

CVE-2007-3135: Undefined Security Weakness

Cross-site scripting XSS vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

Atom Photoblog 1.0.11.0.9 - AtomPhotoblog.php Multiple Input Validation Vulnerabilities

Atom Photoblog 1.0.11.0.9 - AtomPhotoblog.php Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/24363/info Atom PhotoBlog is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in...

Atom Photoblog 1.0.1/1.0.9 - 'AtomPhotoblog.php' Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/24363/info Atom PhotoBlog is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser. These issues include multiple HTML-injection vulnerabilities and a...

CVE-2007-0754

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor STSD atom size in a QuickTime movie...

CVE-2007-0754: Undefined Security Weakness

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor STSD atom size in a QuickTime movie...

[Full-disclosure] Apple QuickTime udta ATOM Integer Overflow

Apple QuickTime udta ATOM Integer Overflow By Sowhat of Nevis Labs Date: 2007.03.06 http://www.nevisnetworks.com http://secway.org/advisory/AD20070306.txt http://secway.org/advisory/AD20060512.txt CVE: CVE-2007-0714 Vendor: Apple Inc. Affected Versions: Apple QuickTime versions 7.1.5 Overview: We...

Apple QuickTime UDTA atom integer overflow

Overview Apple QuickTime contains an integer overflow in handling UDTA atoms, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple QuickTime User Data UDTA Atoms allow a user to "... define and store data associated with a QuickTim...

Integer overflow

Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom UDTA with an Atom size field with a large value...