6643 matches found
mailman mailing lists processor DoS
Scrubber.py fails to process attachment with UTF-8 character in the name and messages with large numbers in dates...
Ubuntu 4.10 / 5.04 : evolution vulnerabilities (USN-166-1)
Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...
CVE-2006-0002
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...
Input validation
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...
CVE-2006-0002
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...
CVE-2005-2344
The vulnerability CVE-2005-2344 affects Research in Motion’s BlackBerry Attachment Service (BES) for BES installations on Windows, where a malformed PNG file can trigger a heap-based buffer overflow. This can cause the Attachment Service to stop responding or crash, and may allow arbitrary code e...
CVE-2006-0120
Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...
CVE-2006-0120
Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service application crash via multiple vectors, involving 1 a malformed message sent to an "Out Of Office" agent SPR LPEE6DMQWJ, 2 the compact command RTIN5U2SAJ, 3 malforme...
Research in Motion (RIM) BlackBerry Attachment Service does not properly handle PNG image files
Overview The Research in Motion RIM BlackBerry Attachment Service contains a vulnerability in the way the service handles PNG files. By causing the service to render a specially crafted PNG file and convincing a user to view the file on a BlackBerry Handheld device, an attacker could execute...
CVE-2005-2341
CVE-2005-2341 describes a heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service that can be triggered by viewing a crafted TIFF attachment in an e‑mail, enabling a remote attacker to cause a denial of service (hang). Affected component: BlackBerry Attachment Service...
CVE-2005-2341
Heap-based buffer overflow in Research in Motion RIM BlackBerry Attachment Service allows remote attackers to cause a denial of service hang via an e-mail attachment with a crafted TIFF file...
CVE-2005-4741
NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid PSUGID process that performs an exec without a reset of real credentials...
CVE-2005-4602
SQL injection vulnerability in inc/functionupload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment...
Research in Motion (RIM) BlackBerry Attachment Service does not properly handle TIFF image files
Overview The Research in Motion RIM BlackBerry Attachment Service contains a vulnerability in the way the service handles TIFF files. By causing the service to render a specially crafted TIFF file and convincing a user to view the file on a BlackBerry Handheld device, an attacker could cause a...
PT-2005-5230 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A remote code execution issue exists in the Graphics Rendering Engine due to its handling of Windows Metafile WMF images. An attacker could exploit this by creating a specially crafted WMF...
Split the mailbox in the Annex of the alternative breakthrough of-vulnerability warning-the black bar safety net
Just buy it to hack line of Defense 1 2 period, above a post titled the mailbox in the Annex of the alternative breakthrough of the articles, lake2 beg to differ, proposed to questionable. Oh to In the text the author says the e-mail attachments to exchange the data stream in the form of drawings...
lyris-listmanager.txt
Title: Lyris ListManager Multiple Flaws Release Date: December 8, 2005 Patch Date: Unknown v8.9b resolves most issues Reported Date: June 21, 2005 Vendor: Lyris Systems Affected: Lyris ListManager v5.0-8.8a most flaws Summary: The Lyris ListManager software is vulnerable to numerous SQL injection...
CVE-2005-4143
SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numeric argument to a /read/attachment URL...
CMailServer mail system, the attachment download module download mail system installation disk arbitrary file vulnerability-vulnerability warning-the black bar safety net
CMailServer mail system, the attachment download module download mail system installation disk arbitrary file vulnerability Our Team: http://www.ph4nt0m.org Author: cloud [email protected] Date: 2005-11-06 Severity: medium Error type: parameter checking is not strict Affect the system: th...