Web Chat Manager 2.0 - HTML Code Injection

source: https://www.securityfocus.com/bid/7190/info It has been reported that Web Chat Manager is prone to HTML injection attacks. This problem occurs due to insufficient sanitization of user-supplied input. As a result of this insufficiency an attacker may embed HTML code via a HTML form field o...

vchat

Product : vchat Version : First WebSite : unknown Problem : View messages Easy DoS Description: ------------ View messages: ============== File with all chat sessions are in txt file msg.txt and everybody can read it Easy DoS: ========= If the size msg.txt will be more than 326 kb a window of a...

Edonkey and Overnet resources consumption

Applications: Edonkey2000 http://www.edonkey2000.com Overnet http://www.overnet.com Versions: 0.45 and previous versions only the GUI program Platforms: Windows only Bug: The programs spawn a new dialog for each chat message that arrives to them, and each dialog take system resources Risk:...

eDonkey Clients 0.440.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities

eDonkey Clients 0.440.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities source: https://www.securityfocus.com/bid/7164/info A vulnerability has been reported for eDonkey clients for Windows that will result in a denial of service condition. The vulnerability occurs when numerous chat...

eDonkey Clients 0.44/0.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities

source: https://www.securityfocus.com/bid/7164/info A vulnerability has been reported for eDonkey clients for Windows that will result in a denial of service condition. The vulnerability occurs when numerous chat dialog boxes are opened by the eDonkey or Overnet clients. Every open chat dialog bo...

Rediff Bol 2.0.2 - URL Handling Denial of Service

Rediff Bol 2.0.2 - URL Handling Denial of Service source: https://www.securityfocus.com/bid/6670/info It has been reported that a problem in Rediff Bol may allow remote users to log other users out of the Bol chat client. Due to improper handling of some types of requests, a remote user could sen...

CVE-2002-2173

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...

CVE-2002-1351

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service chat server crash and possibly execute arbitrary code via the msgText buffer in the chatInterpretData function, as demonstrated via a long Nick nickname request...

Melange Chat Server 1.10 - Remote Buffer Overflow

/ Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible to control even the EIP, not just one byte of EIP...

Melange Chat Server 1.10 - Remote Buffer Overflow

Melange Chat Server 1.10 - Remote Buffer Overflow / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible to...

Melange Chat Server 1.10 Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ======================================================= Melange Chat Server 1.10 Remote Buffer Overflow Exploit ======================================================= / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit ...

CVE-2002-0552

Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a long argument in the /yell command, 2 long lines in the /etc/melange.conf configuration file, 3 long file names, or possibly other...

CVE-2002-0552

The CVE-2002-0552 entry concerns Melange Chat Server 2.02 with multiple buffer overflows that can be triggered remotely or locally. The documented vectors include: (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, and (3) long file names, among ...

CVE-2002-0552

Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a long argument in the /yell command, 2 long lines in the /etc/melange.conf configuration file, 3 long file names, or possibly other...

CVE-2002-0155

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX...

Security Bulletin MS02-022: Unchecked Buffer in MSN Chat Control Can Lead to Code Execution (Q321661)

---------------------------------------------------------------------- Title: Unchecked Buffer in MSN Chat Control Can Lead to Code Execution Q321661 Date: 08 May 2002 Software: MSN Chat, MSN Messenger, Exchange Instant Messenger Impact: Run Code of Attacker's Choice Max Risk: Critical Bulletin:...

Buffer overflow in MSN Messanger

Buffer overflow on long font name in header and in OCX MSN Chat Control...

Melange Chat System 2.0.2 Beta 2 - yell Remote Buffer Overflow

Melange Chat System 2.0.2 Beta 2 - yell Remote Buffer Overflow source: https://www.securityfocus.com/bid/4508/info Melange Chat System is a chat server program developed by Christian Walter. Currently support for this application is no longer available. Due to inadequate bounds checking in Melang...

Melange Chat System 2.0.2 Beta 2 - '/yell' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/4508/info Melange Chat System is a chat server program developed by Christian Walter. Currently support for this application is no longer available. Due to inadequate bounds checking in Melange, it is possible for users to initiate a buffer overflow...

[ARL02-A07] ARSC Really Simple Chat System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A07 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : ARSC Really Simple Chat System...