CVE-2006-2781

CVE-2006-2781 describes a double-free vulnerability in nsVCard.cpp that affects Mozilla Thunderbird prior to 1.5.0.4 and SeaMonkey prior to 1.0.2 . An attacker could craft a VCard containing invalid base64 characters to trigger a vulnerability, potentially causing a denial of service (hang) and, ...

CVE-2006-2781

Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service hang and possibly execute arbitrary code via a VCard that contains invalid base64 characters...

Double-free on malformed VCard — Mozilla

Masatoshi Kimura reported a hang caused by a double-free in Thunderbird when processing a large VCard with invalid base64 characters in it. Since an attacker can supply an arbitrary amount of well-formed VCard data before introducing the error we presume this could be exploited to run code of the...

CVE-2006-2563

The cURL library libcurl in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters...

CVE-2006-2563

The cURL library libcurl in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters...

CVE-2006-2563

The cURL library libcurl in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters...

AlstraSoft E-Friends - XSS

AlstraSoft E-Friends - XSS Homepage: http://www.alstrasoft.com/ Description: Alstrasoft E-friends allows you to run a community site like MySpace and Friendster. Effected files or areas of site: index.php The input forms on the following items belowdo not properlly filter out all potential harmfu...

[Full-disclosure] rPSA-2006-0080-1 postgresql postgresql-server

rPath Security Advisory: 2006-0080-1 Published: 2006-05-24 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Local System User Deterministic Vulnerability Updated Versions: postgresql=/conary.rpath.com@rpl:devel//1/8.1.4-1-0.1...

Sql injection

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL...

CVE-2006-2313

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL...

Ubuntu 5.04 / 5.10 : mysql-dfsg vulnerability (USN-274-2)

USN-274-1 fixed a logging bypass in the MySQL server. Unfortunately it was determined that the original update was not sufficient to completely fix the vulnerability, thus another update is necessary. We apologize for the inconvenience. For reference, these are the details of the original USN : A...

ASP database plug horse small conference-vulnerability warning-the black bar safety net

With the development of technology, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case? i.e. insertion of each of the characters between the There are spaces for? Now, let us to solve this problem...

FreeBSD : gaim -- AIM/ICQ non-UTF-8 filename crash (09db2844-0b21-11da-bc08-0001020eed82)

The GAIM team reports : A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK...

Command injection

acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...

CVE-2006-2242

acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...

CVE-2006-2254

Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service application crash via a username with a large number of newline characters...

Buffer overflow

Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service application crash via a username with a large number of newline characters...

CVE-2006-2242

acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...

Buffer overflow

Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of service daemon crash via a request for a URI composed of several "" backslash characters...

CVE-2006-2222

CVE-2006-2222 describes a buffer overflow in zawhttpd (v0.8.23 and possibly earlier) that allows remote attackers to cause a denial of service (daemon crash) by crafting a request URI containing multiple backslash characters. The affected component is zawhttpd, and the root cause is a buffer over...