EUVD-2004-1771

Malware in sbrugna...

Funds are sent twice on callTo errors

Handle cmichel Vulnerability details Vulnerability Details The fulfill transaction on the receiving chain tries to call the addFunds and execute actions on txData.callTo. When any of the calls reverts, the funds are sent to the txData.receivingAddress. The txData.callTo is user-controlled and an...

Microsoft Netmeeting 2.1/3.0.1 4.4.3385 CALLTO URL Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be due to a boundary condition error in one...

CVE-2005-3265

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

CVE-2005-3265

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

CVE-2005-3265: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

CVE-2004-1777: Improper Input Validation

A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service application crash via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114...

CVE-2004-1114

Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777...

CVE-2004-1114: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777...

Skype < 1.0.0.100 CallTo URI Buffer Remote Overflow

Binary data 2405.prm...

Skype buffer overflow

callto: URL buffer overflow...

Skype buffer overflow

Buffer overflow on callto: URL...

Microsoft NetMeeting 2.13.0.1 4.4.3385 - CALLTO URL Buffer Overflow (PoC)

Microsoft NetMeeting 2.13.0.1 4.4.3385 - CALLTO URL Buffer Overflow PoC source: https://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be du...

Microsoft NetMeeting 2.1/3.0.1 4.4.3385 - CALLTO URL Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/7639/info It has been reported that clicking a malformed 'callto:' URI in Internet Explorer will cause Windows 2000 systems to crash, resulting in a blue screen. This appears to be due to a boundary condition error in one of the URI parameters of the CALL...