4077 matches found
PT-2006-3745 · X Cart · X-Cart
Name of the Vulnerable Software and Affected Versions: X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field in search.php, when the settings specify only "Search in Detailed...
DEBIAN-CVE-2006-2789
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service persistent crash via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used...
FreeBSD : turba -- XSS vulnerabilities in several of the address book name and contact data fields (eeebd55d-6a88-11da-b96e-000fb586ba73)
Announce of Turba H3 2.0.5 final : This 2.0.5 is a security release that fixes cross site scripting vulnerabilities in several of the address book name and contact data fields. None of the vulnerabilities can be exploited by unauthenticated users; however, we strongly recommend that all users of...
Design/Logic Flaw
The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...
CVE-2006-1948
The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...
CVE-2006-1948
The CVE-2006-1948 entry affects IBM Lotus Notes 6.0 and 6.5 before 20060331. The issue stems from AddSenderToAddressBook.lss and NameHelper.lss not storing information in the Personal Address Book when multiple messages are selected and a message uses AltFrom, enabling user-assisted remote attack...
CVE-2006-1948
The "Add Sender to Address Book" operation AddSenderToAddressBook.lss and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted...
Buffer overflow
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...
CVE-2006-0014
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...
CVE-2006-0014: Undefined Security Weakness
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...
CVE-2006-0014
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...
Microsoft Outlook Express buffer overflow
Buffer overflow on parsing WAB address book...
ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability
ZDI-06-007: Microsoft Windows Address Book WAB File Format Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-007.html April 11, 2006 -- CVE ID: CVE-2006-0014 -- Affected Vendor: Microsoft -- Affected Products: Windows XP SP2 Windows 2000 SP4 -- TippingPointTM IPS Customer...
MS06-016: Vulnerability in Outlook Express Could Allow Remote Code Execution (911567)
The remote host is running a version of Microsoft Outlook Express that may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed Windows Address Book .wab file to a victim on the remote host and have him open the file. C...
Update Protection against Microsoft Outlook Express Windows Address Book File Vulnerability (MS06-016)
Microsoft Outlook Express is a commonly used email application. A vulnerability has been discovered in the file which contains the address book of Outlook Express, potentially allowing a malicious attacker to take control of the affected machine...
Microsoft Outlook Express Windows Address Book File Parsing Buffer Overflow Vulnerability
Description Microsoft Outlook Express is prone to a remote buffer-overflow vulnerability. This vulnerability presets itself when the application processes a specially crafted Windows Address Book .wab file. An attacker may exploit this issue to execute arbitrary code in the context of a user...
Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Microsoft Windows operating system. User interaction is required to exploit this vulnerability. The specific flaw exists during the parsing of malformed Windows Address Book .WAB files. Modification o...
HYSA-2006-006-g-book.txt
------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...