9804 matches found
Microsoft Security Bulletin MS03-035: Flaw in Microsoft Word Could Enable Macros to Run Automatically(827653)
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in Microsoft Word Could Enable Macros to Run Automatically 827653 Date: September 3, 2003 Software: Microsoft Word 97 Microsoft Word 98 J Microsoft Word 2000 Microsoft Word 2002...
[NT] The Return of the Content-Disposition Vulnerability in IE
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2002-1503
Buffer overflow in Automatic File Distributor AFD 1.2.14 and earlier allows local users to gain privileges via a long MONWORKDIR environment variable or -w workdir argument to 1 afd, 2 afdcmd, 3 afdctrl, 4 initafd, 5 mafd, 6 monctrl, 7 showolog, or 8 udc...
CVE-2002-1503
Buffer overflow in Automatic File Distributor AFD 1.2.14 and earlier allows local users to gain privileges via a long MONWORKDIR environment variable or -w workdir argument to 1 afd, 2 afdcmd, 3 afdctrl, 4 initafd, 5 mafd, 6 monctrl, 7 showolog, or 8 udc...
CVE-2002-1503: Undefined Security Weakness
Buffer overflow in Automatic File Distributor AFD 1.2.14 and earlier allows local users to gain privileges via a long MONWORKDIR environment variable or -w workdir argument to 1 afd, 2 afdcmd, 3 afdctrl, 4 initafd, 5 mafd, 6 monctrl, 7 showolog, or 8 udc...
Automatic File Content Type Recognition Tool contains memory allocation problem
Overview A memory allocation problem exists in the "Automatic File Content Type Recognition Tool" versions of the file1 package prior to 3.41. Description According to an OpenPKG advisory, a memory allocation problem exists in the "Automatic File Content Type Recognition Tool" AFCTR tool versions...
AFD 1.2.14 multiple local root compromises
Netric Security Team - http://www.netric.org|be By Netric AFD 1.2.14 multiple local root exploits type: stack and heap overflows Priority: 5 1 Description 2 Vulnerable 3 Exploit 4 Proof of concept 5 Vendor response 6 Patches 1 Description The Automatic File Distributor provides a framework for ve...
CVE-2002-0901: Undefined Security Weakness
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver AMANDA 2.3.0.4 allow 1 remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs 2 amcheck, 3...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow // source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. ...
Nullsoft Winamp 2.80 - Automatic Update Check Buffer Overflow
// source: https://www.securityfocus.com/bid/5170/info Nullsoft Winamp is a media player for Microsoft Windows supporting MP3 and other filetypes. Winamp is vulnerable to a buffer overflow condition when checking for updated versions. A malicious server located at www.winamp.com may return a...
[SNS Advisory No.48] Microsoft Internet Explorer Still Download And Execute ANY Program Automatically
---------------------------------------------------------------------- SNS Advisory No.48 Microsoft Internet Explorer Still Download And Execute ANY Program Automatically Problem first discovered: Wed, 13 Feb 2002 Published: Mon, 18 Mar 2002 Revised: Thu, 16 May 2002...
CVE-2002-0340
Windows Media Player WMP 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files...
CVE-2001-0501
Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner...
CVE-2001-0720
Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled...
CVE-2001-0720
CVE-2001-0720 affects Internet Explorer 5.1 for Macintosh on Mac OS X. The issue allows remote execution of arbitrary commands by triggering the download of a BinHex or MacBinary file type that is executed if automatic decoding is enabled. The vulnerability arises in how the browser handles certa...
CVE-2001-0720: Undefined Security Weakness
Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled...
CVE-1999-1333: Undefined Security Weakness
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded...
Auto file execution vulnerability in Mac OS
Auto file execution vulnerability in Mac OS http://homepage.mac.com/vmconverter/macautoexecvuln.html Overview We found a vulnerability in Mac OS and Mac OS X with Classic Environment. If victims only browse malicious web-page; 1.Browsers start automatically download a compressed disc-image file...
MSIE may download and run programs automatically - details
This posting briefly describes some technical details of the vulnerability discussed in the Bugtraq messages with the subjects "MSIE may download and run progams automatically" Dec 14 2001 and "File extensions spoofable in MSIE download dialog" Nov 26 2001. The flaw allows a malicious web site to...