CVE-2011-5003: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Phonetic Indexer AvidPhoneticIndexer.exe in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659...

Avid Media Composer 5.5 - Avid Phonetic Indexer Stack Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Avid Media Compos...

Avid Media Composer 5.5 - Avid Phonetic Indexer Stack Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

AVID Media Composer Phonetic Indexer Remote Stack BoF

Exploit for windows platform in category remote exploits Name :AVID Media Composer Phonetic Indexer Remote Stack Buffer Overflow Vendor Website : http://www.avid.com Date Released : November 29, 2011 Affected Software : AVID Media Composer = 5.5.3 Researcher Researcher : Nick Freeman...

AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow (Metasploit)

AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow Metasploit Name :AVID Media Composer Phonetic Indexer Remote Stack Buffer Overflow Vendor Website : http://www.avid.com Date Released : November 29, 2011 Affected Software : AVID Media Composer = 5.5.3 Researcher Researcher : Nic...

AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow (Metasploit)

Name :AVID Media Composer Phonetic Indexer Remote Stack Buffer Overflow Vendor Website : http://www.avid.com Date Released : November 29, 2011 Affected Software : AVID Media Composer = 5.5.3 Researcher Researcher : Nick Freeman [email protected] Description...

Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow

This module exploits a stack buffer overflow in process AvidPhoneticIndexer.exe port 4659, which comes as part of the Avid Media Composer 5.5 Editing Suite. This daemon sometimes starts on a different port; if you start it standalone it will run on port 4660. Module Options msf use...

Security Release: Symfony 2.0.6

Symfony 2.0.6 has just been released. It addresses a security vulnerability in the EntityUserProvider as provided in the Doctrine bridge. If you let your users update their login/username from a form, and if you are using Doctrine as a user provider, then you are vulnerable and you should upgrade...

Fedora 10 : amarok-2.0.1.1-1.fc10 (2009-0550)

An update to the latest release, includes new features such as queuing, playlist search and filtering as well as 'stop after current track'. And, long awaited and finally available: sorting the collection by composer. Also includes a security fix concerning the parsing of malformed Audible digita...

Fedora Core 10 FEDORA-2009-0550 (amarok)

The remote host is missing an update to amarok announced via advisory FEDORA-2009-0550. OpenVAS Vulnerability Test $Id: fcore20090550.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0550 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

fc_sql.txt

Title : Facility Composer Website SQL Injection Description : The Facility Composer Website at ff.cecer.army.mil/fc/ suffers from an SQL Injection vulnerability. Author : Tosser E-mail : [email protected] Proof : Go to https://ff.cecer.army.mil/fc/login.jsp and type something like ' or 'x'='x in t...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...

CVE-2008-2862

Multiple SQL injection vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to ansFAQ.asp and the 2 templateid parameter to preview.asp...

Path traversal

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

Sql injection

Multiple SQL injection vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to ansFAQ.asp and the 2 templateid parameter to preview.asp...

CVE-2008-2861

Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...

Path traversal

eLineStudio Site Composer ESC 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 trigger.asp or 2 common2.asp in cms/include/, which reveals the database path...

CVE-2008-2864

eLineStudio Site Composer ESC 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 trigger.asp or 2 common2.asp in cms/include/, which reveals the database path...

CVE-2008-2861

Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...

CVE-2008-2862

Affected software: eLineStudio Site Composer (ESC) up to version 2.6. Vulnerable components: ansFAQ.asp (id parameter) and preview.asp (template_id parameter)—subject to SQL injection due to improper input handling. Root cause: user input directly used in SQL commands. Impact: remote attackers ca...