Microsoft Windows Messenger Service Buffer Overrun Vulnerability

Description Microsoft Windows Messenger Service is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of messages before they are passed to an internal buffer. Exploitation could result in a denial of service or in execution of malicious code...

MS03-045: Buffer Overrun in the ListBox and in the ComboBox (824141)

A vulnerability exists because the ListBox control and the ComboBox control both call a function, located in the User32.dll file, that contains a buffer overrun. A local, interactive attacker could run a program that sends a specially crafted Windows message to any application that has implemente...

Microsoft ListBox/ComboBox Control - 'User32.dll' Buffer Overrun

source: https://www.securityfocus.com/bid/8827/info Microsoft has reported the existence of a local buffer overrun vulnerability in an undisclosed User32.dll library function. This function is used by applications implementing the use of ListBox or ComboBox controls and will be triggered when the...

MS03-043: Buffer Overrun in Messenger Service (828035)

The remote version of Windows contains a Heap Overflow in the Messenger service that could allow an attacker to execute arbitrary code on the remote host with the SYSTEM privileges. A series of worms Gaobot, Agobot, ... are known to exploit this vulnerability in the wild. C Tenable Network...

Microsoft ListBoxComboBox Control - User32.dll Buffer Overrun

Microsoft ListBoxComboBox Control - User32.dll Buffer Overrun source: https://www.securityfocus.com/bid/8827/info Microsoft has reported the existence of a local buffer overrun vulnerability in an undisclosed User32.dll library function. This function is used by applications implementing the use ...

MS03-023: Buffer Overrun In HTML Converter Could Allow Code Execution (823559)

The remote host contains a version of the HTML Converter module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...

Silly Poker 0.25.5 - Local HOME Environment Variable Buffer Overrun

Silly Poker 0.25.5 - Local HOME Environment Variable Buffer Overrun // source: https://www.securityfocus.com/bid/8736/info A local buffer overrun vulnerability has been reported for Silly Poker. The problem occurs due to insufficient bounds checking when handling user-supplied data. As a result, ...

Silly Poker 0.25.5 - Local HOME Environment Variable Buffer Overrun

// source: https://www.securityfocus.com/bid/8736/info A local buffer overrun vulnerability has been reported for Silly Poker. The problem occurs due to insufficient bounds checking when handling user-supplied data. As a result, an attacker may be capable of controlling the execution flow of the...

WebFS 1.x - Pathname Buffer Overrun

WebFS 1.x - Pathname Buffer Overrun // source: https://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting...

WebFS 1.x - 'Pathname' Buffer Overrun

// source: https://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting sensitive memory with malicious dat...

GNU CFEngine 2.0.x - CFServD Transaction Packet Buffer Overrun (1)

// source: https://www.securityfocus.com/bid/8699/info cfengine is prone to a stack-based buffer overrun vulnerability. This issue may be exploited by remote attackers who can send malicious transaction packets to cfservd. This issue is due to insufficient bounds checking of data that is read in...

MPlayer 0.91.0 - Streaming ASX Header Parsing Buffer Overrun

MPlayer 0.91.0 - Streaming ASX Header Parsing Buffer Overrun source: https://www.securityfocus.com/bid/8702/info A vulnerability has been discovered in MPLayer when handling malformed streaming ASX file headers. The problem occurs due to insufficient bounds checking performed within asfhttpreques...

Athttpd 0.4b - GET Remote Buffer Overrun

Athttpd 0.4b - GET Remote Buffer Overrun // source: https://www.securityfocus.com/bid/8709/info Athttpd is said to be prone to a remote buffer overrun that could allow an attacker to execute arbitrary code. The problem occurs due to insufficient bounds checking when handling GET requests. As a...

GNU CFEngine 2.0.x - CFServD Transaction Packet Buffer Overrun (1)

GNU CFEngine 2.0.x - CFServD Transaction Packet Buffer Overrun 1 // source: https://www.securityfocus.com/bid/8699/info cfengine is prone to a stack-based buffer overrun vulnerability. This issue may be exploited by remote attackers who can send malicious transaction packets to cfservd. This issu...

Athttpd 0.4b - GET Remote Buffer Overrun

// source: https://www.securityfocus.com/bid/8709/info Athttpd is said to be prone to a remote buffer overrun that could allow an attacker to execute arbitrary code. The problem occurs due to insufficient bounds checking when handling GET requests. As a result, an attacker may be capable of...

ProFTPd 1.2.7/1.2.8 - '.ASCII' File Transfer Buffer Overrun

// source: https://www.securityfocus.com/bid/8679/info A remotely exploitable buffer overrun vulnerability has been reported in ProFTPD. This issue could be triggered if an attacker uploads a malformed file and then that file is downloaded in ASCII mode. Successful exploitation will permit a...

ProFTPd 1.2.71.2.8 - .ASCII File Transfer Buffer Overrun

ProFTPd 1.2.71.2.8 - .ASCII File Transfer Buffer Overrun // source: https://www.securityfocus.com/bid/8679/info A remotely exploitable buffer overrun vulnerability has been reported in ProFTPD. This issue could be triggered if an attacker uploads a malformed file and then that file is downloaded ...

Sendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun

/ source: https://www.securityfocus.com/bid/8641/info Sendmail is prone to a buffer overrun vulnerability in the prescan function. This issue is different than the vulnerability described in BID 7230. This vulnerability could permit remote attackers to execute arbitrary code via vulnerable versio...

Sendmail 8.12.9 - Prescan() Variant Remote Buffer Overrun

Sendmail 8.12.9 - Prescan Variant Remote Buffer Overrun / source: https://www.securityfocus.com/bid/8641/info Sendmail is prone to a buffer overrun vulnerability in the prescan function. This issue is different than the vulnerability described in BID 7230. This vulnerability could permit remote...

Yahoo! Webcam ActiveX Control 2.0.0.107 - Buffer Overrun

Yahoo! Webcam ActiveX Control 2.0.0.107 - Buffer Overrun source: https://www.securityfocus.com/bid/8634/info A buffer overrun has been discovered in the Yahoo! Webcam ActiveX control. The problem occurs due to insufficient bounds checking when handling user-supplied Webcam parameters. As a result...