CVE-2007-3109

The CERN Image Map Dispatcher htimage.exe in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATHINFO...

Code injection

The CERN Image Map Dispatcher htimage.exe in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATHINFO...

CVE-2007-3109

The CVE-2007-3109 description in the connected documents identifies the CERN Image Map Dispatcher (htimage.exe) used by Microsoft FrontPage as the affected component. The vulnerability allows remote attackers to determine the existence and potentially partial contents of arbitrary files under the...

CERN İmage Map Dispatcher

CERN Image Map Dispatcher /cgi-bin/htimage.exe comes by default with FrontPage. I found three bugs in "htimage.exe": 1 Gives us the full path to the root directory 2 Simple buffer overflow 3 Allow us to access files. Problem 1 Like I said, the first bug gives us the full path to the root director...

ADV-150400.txt

------- Legion2000 - Russian Security Team ADV-1504001 ------- www.legion2000.cc ---- INFORMATION ---- Program Name : CERN Image Map Dispatcher Discovered By : Narrow [email protected] --------------------- Problem Description CERN Image Map Dispatcher /cgi-bin/htimage.exe comes by default with...

Ошибки в CERN Image Map Dispatcher (Front Page)

Несколько неприятных ошибок в htimage.exe позволяют получить доступ к любому файлу. Переполнение буфера позволяет выполнить код на сервере...

More vulnerabilities in FP

------- Legion2000 - Russian Security Team ADV-1504001 ------- www.legion2000.cc ---- INFORMATION ---- Program Name : CERN Image Map Dispatcher Discovered By : Narrow [email protected] --------------------- Problem Description CERN Image Map Dispatcher /cgi-bin/htimage.exe comes by default with...