CVE-2007-2043

CVE-2007-2043 describes multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) module for Mambo/Joomla! (versions 1.08 and earlier). The flaws allow remote attackers to execute arbitrary PHP code by supplying a crafted URL to the mosConfig_absolute...

Avant Browser buffer overflow

Buffer overflow on oversized Content-Type: header...

CVE-2007-1501

Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Content-Type HTTP header...

Stack overflow

Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Content-Type HTTP header...

CVE-2007-1501

CVE-2007-1501 affects Avant Browser 11.0 build 26, where a stack-based buffer overflow can be triggered by a long Content-Type HTTP header. This may allow remote attackers to cause a crash (DoS) and potentially execute arbitrary code. Exploitation details are not provided in the initial documents...

CVE-2007-1501

Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Content-Type HTTP header...

CVE-2003-1321

Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URL in an HTTP request...

CVE-2003-1321

CVE-2003-1321 concerns Avant Browser 8.02, where a buffer overflow can be triggered by a long URL in an HTTP request, enabling remote denial-of-service and potentially arbitrary code execution. The provided documents do not specify a fix/patch version or remediation. No exploitation status is det...

Avant Browser 11.0 build 26 - Remote Stack Overflow Crash

Avant Browser 11.0 build 26 - Remote Stack Overflow Crash !/usr/bin/perl Avant Browser ALL Version Remot Stack OverFlow Crash Discovered by DATASNIPER Usage: connect from Avant browser to http://127.0.0.1/ use IO::Socket; my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPor...

Avant Browser 11.0 build 26 - Remote Stack Overflow Crash

!/usr/bin/perl Avant Browser ALL Version Remot Stack OverFlow Crash Discovered by DATASNIPER Usage: connect from Avant browser to http://127.0.0.1/ use IO::Socket; my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 80, Proto = 'tcp'; die unless $sock; $huge="A" x...

Design/Logic Flaw

Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as ...

CVE-2006-2058

Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as ...

CVE-2006-2058

The CVE describes an argument-injection vulnerability in Avant Browser 10.1 Build 17 where user-supplied input in a mailto: link can modify the command line arguments passed to an invoked mail client (e.g., launching Outlook with a crafted filename attachment). The issue is triggered by untrusted...

CVE-2006-2058

Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as ...

PT-2006-3039 · Microsoft +1 · Outlook +1

Name of the Vulnerable Software and Affected Versions: Avant Browser version 10.1 Build 17 Description: The issue allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " double quote characters in a mailto: scheme handler. This can be demonstrated by...

KLA10086 CI vulnerability in Avant Browser

An unspecified vulnerability was found in the Avant browser. By exploiting this vulnerability malicious users can inject command line arguments. This vulnerability can be exploited remotely with user assistance via a specially designed ‘mailto:’ link. Original advisories - Related products...

Multiple browsers Windows mailto protocol Office 2003 file attachment exploit

Inge Henriksen Security Advisory http://ingehenriksen.blogspot.com/ Advisory Name: Multiple browsers Windows mailto protocol Office 2003 file attachment exploit Release Date: Not released Tested and Confirmed Vulerable: Micrsoft Outlook 2003 SP 1 Microsoft Internet Explorer 6 SP2 Mozilla Firefox...

CVE-2003-1321

Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URL in an HTTP request...

Avant Browser buffer overflow

Buffer overflow on oversized URL...

Buffer overflow in Avant Browser 8.02

/ ZUD SECURITY TEAM PRESENT : : bug found by nimber 000o0o : Email : [email protected] : Site: www.zudteam.org www.zudteam.org : HomePage: www.nimber.plux.ru : : ====================== : Advisory Information: //----------------------------------------o =====================// : Application : Ava...