UiPlayer UiCheck组件栈溢出漏洞

CVE ID: CVE-2009-2970 UiPlayer网络视频播放软件是联合网视（UITV）公司的视频播放软件。 UiPlayer的安装目录下的UiCheck.dll是一个ActiveX控件，该控件允许在IE中加载。UiCheck.dll提供了一个接口函数 GetUiDllVersion，该函数会把接收到的文件名参数拷贝到一个固定大小的缓冲区，如果文件名超长，就会导致栈溢出。 因为和百度等公司的合作，很多视频播放软件中也集成了UiPlayer，例如百度下吧等。 UiTV UiPlayer UiCheck.dll 1.0.0.6 Baidu BaiduV 临时解决方法：...

CVE-2008-7013

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

Code injection

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

CVE-2008-7013

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

CVE-2008-7013

CVE-2008-7013 affects NetService.dll in Baidu Hi IM. The vulnerability allows remote servers to trigger a divide-by-zero via a crafted login response, causing a client crash (denial of service). The CVSS base score is 5.0 (Medium) with network access and no authentication, resulting in partial av...

Good fine enterprise management system injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability file: en/DownloadShow. asp chinese/DownloadShow. asp The exploit: the In Baidu, type: inurl: DownloadShow. asp? DownID= In Google type: allinurl: DownloadShow. asp? DownID= Get the search page address copied down. Open the D2. 3 2. Paste the address detection of the address bar you...

CVE-2008-6444

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

Stack overflow

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

CVE-2008-6444

CVE-2008-6444 affects Baidu Hi IM; vulnerable component is CSTransfer.dll, where a stack-based buffer overflow could allow remote code execution via a crafted packet, likely due to an improper length value. Connections across sources confirm the same description; no specific exploit details or af...

CVE-2008-6444

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

baidu url xss

百度空间搜索的ＨＩ变量信息过滤不严，导致跨站，能进行恶意挂马和钓鱼等攻击． hi.baidu.com 过滤有危害的字符 http://hi.baidu.com/sys/search?region=3&hi=scriptalert/script http://hi.baidu.com/sys/search?region=3&hi=iframe src=http://www.163.com...

Hidden website back-end management-vulnerability warning-the black bar safety net

A recent search through some of the search terms of information, combined with some of the actual search experience draw some of the Security aspects of thinking: Example: Use GOOGLE's search commands intitle:management intitle:background intext:admin And some very simple Search command, you will...

世界之窗(The World)浏览器地址栏欺骗漏洞

No description provided by source. +++++++++++++++++++++++++++++++++++++++++ 新打开的链接，地址栏是http://www.baidu.com 内容却是被人恶意控制的 Baidu function win x=window.open'http://www.baidu.com'; x.location="about:Baidu要过冬了其实80sec说了也不算数了......document.title="Hacked By 80sec"";...

Baidu space XSIO vulnerability-vulnerability warning-the black bar safety net

Article author: aullik5 Original source: http://hi.baidu.com/aullik5/blog ... a02c6785352416.html Today want to talk about this vulnerability is a very wretched vulnerability. Most of the sites have this vulnerability, not only is Baidu. What is XSIO, and why is it wretched? XSIO is because there...

Baidu Hi IM client software DoS bug, div zero make client crash

Baidu Hi IM client software DoS bug, div zero make client crash -- CVE ID: Not assigned -- Affected Vendors: Baidu -- Affected Products: Baidu Hi IM software -- Vulnerability Details: Our automatic bug exploiting tools have found a DoS bug in Baidu Hi IM client which is a popular IM software in...

Baidu Hi instant messenger integer overflow

Integer overflow on encrypted message decyphering causes buffer overflow...

Baidu Hi IM software parsing plaintext stack overflow

Our automatic bug exploiting tools have found a buffer overflow bug in Baidu Hi IM software which is a popular IM software in China. This bug is due to Baidu Hi do not strictly check the deciphered plaintext format in CSTransfer.dll. Because of encryption mechanism of Baidu Hi, it is hard to...

Baidu Hi IM software parsing plaintext stack overflow

Baidu Hi IM software parsing plaintext stack overflow -- CVE ID: Not assigned -- Affected Vendors: Baidu -- Affected Products: Baidu Hi IM software -- Vulnerability Details: Our automatic bug exploiting tools have found a buffer overflow bug in Baidu Hi IM software which is a popular IM software ...

Be careful Baidu blog rss leak your blog secrets-the vulnerability warning-the black bar safety net

If you apply for a Baidu blog, then in Settings-Display Options-article display options for full-text or summary, then you want to hide the articles through the rss to be seen. For the time being the solution is: Settings--Display Options--article display options to the title, so bad intentions o...

Baidu cross-site vulnerability 0 8 2 8-vulnerability warning-the black bar safety net

http://zhangmen.baidu.com/addprom.jsp?topic="scriptalert/hello! iambadwolf,www.winshell.cn//scriptiframe%20name="I1"%20src="http://www.winshell.cn/"/iframe...