CVE-2006-1948

The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...

Design/Logic Flaw

The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...

CVE-2006-1948

The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...

CVE-2006-1948

The CVE-2006-1948 entry affects IBM Lotus Notes 6.0 and 6.5 before 20060331. The issue stems from AddSenderToAddressBook.lss and NameHelper.lss not storing information in the Personal Address Book when multiple messages are selected and a message uses AltFrom, enabling user-assisted remote attack...

CVE-2006-0014

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

Buffer overflow

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

Microsoft Outlook Express buffer overflow

Buffer overflow on parsing WAB address book...

CVE-2006-0014: Undefined Security Weakness

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability

ZDI-06-007: Microsoft Windows Address Book WAB File Format Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-007.html April 11, 2006 -- CVE ID: CVE-2006-0014 -- Affected Vendor: Microsoft -- Affected Products: Windows XP SP2 Windows 2000 SP4 -- TippingPointTM IPS Customer...

CVE-2006-0014

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

MS06-016: Vulnerability in Outlook Express Could Allow Remote Code Execution (911567)

The remote host is running a version of Microsoft Outlook Express that may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed Windows Address Book .wab file to a victim on the remote host and have him open the file. C...

Microsoft Outlook Express Windows Address Book File Parsing Buffer Overflow Vulnerability

Description Microsoft Outlook Express is prone to a remote buffer-overflow vulnerability. This vulnerability presets itself when the application processes a specially crafted Windows Address Book .wab file. An attacker may exploit this issue to execute arbitrary code in the context of a user...

Update Protection against Microsoft Outlook Express Windows Address Book File Vulnerability (MS06-016)

Microsoft Outlook Express is a commonly used email application. A vulnerability has been discovered in the file which contains the address book of Outlook Express, potentially allowing a malicious attacker to take control of the affected machine...

Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Microsoft Windows operating system. User interaction is required to exploit this vulnerability. The specific flaw exists during the parsing of malformed Windows Address Book .WAB files. Modification o...

HYSA-2006-006-g-book.txt

------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...

CVE-2006-1398

Cross-site scripting XSS vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the gmessage parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the gmessage parameter...

CVE-2006-1398

The CVE-2006-1398 entry describes a Cross-site scripting (XSS) vulnerability in G-Book 1.0, specifically in guestbook.php where the g_message parameter can be exploited by remote attackers to inject arbitrary web script or HTML. The vulnerability is caused by inadequate sanitization of input, all...

CVE-2006-1398

Cross-site scripting XSS vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the gmessage parameter...

CVE-2006-1398: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the gmessage parameter...