5278 matches found
TeamFactor integer overflow
Integer overflow on signed/unsigned conversion...
CVE-2002-0034
The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected...
DEBIAN-CVE-2003-1023
Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...
CVE-2003-1023
Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...
CVE-2003-1023
Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...
CVE-2003-1023
Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...
CVE-2003-1023
Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...
Buffer overflows on address parsing in sendmail
Buffer overflows because on signed/unsigned type conversion...
Microsoft Word Perfect convertor buffer overflow
Buffer overflow during Word Perfect document convertion...
Linux kernel signed/unsigned conversion bug
Signed/unsigned conversion bug during processing of NFSv3 XDR data leads to buffer overflow...
CERT Advisory CA-2003-14 Buffer Overflow in Microsoft Windows HTML
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-14 Buffer Overflow in Microsoft Windows HTML Conversion Library Original issue date: July 14, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Windows 98 and 98 Second Edition SE...
CVE-2003-0539
CVE-2003-0539 affects skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package based on skk. The issue: insecure temporary file creation allows a local attacker to overwrite arbitrary files. Impact is local, with partial confidentiality/integrity/availability concerns...
Microsoft Windows XP2000 - RunDLL32.exe Local Buffer Overflow
Microsoft Windows XP2000 - RunDLL32.exe Local Buffer Overflow source: https://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable applicati...
Microsoft Windows HTML conversion library vulnerable to buffer overflow
Overview A buffer overflow vulnerability exists in a shared HTML conversion library used by Internet Explorer IE and other Windows applications. By enticing a victim to view an HTML document using IE, an attacker could execute arbitrary code with the victim's privileges or cause IE to crash...
Microsoft Internet Explorer - Object Tag (MS03-020)
!/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype dynamic call oferflow url:// the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near '&CLSID=AAA...2F2F...'. To exploit: i start server perl script; ii...
HP-UX FTPD REST Command Remote Arbitrary Memory Disclosure
The remote FTP server seems to be vulnerable to an integer conversion bug when it receives a malformed argument to the 'REST' command. An attacker may exploit this flaw to force the remote FTP daemon to disclose portions of the memory of the remote host. %NASLMINLEVEL 70300 C Tenable Network...
Microsoft IIS WebDav buffer overflow
Buffer overflow in path conversion routine...
Bug found in: Polymorph 0.4.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 01100011 - code 'security research team' - ---------------------------------------- - - http://www.c-code.net - - Advisory and PoC exploit by: demz // [email protected] - - Vulnerable source: Polymorph v0.4.0 - - Bug type: Stackoverflow - - Priority: 3 ...
[SECURITY] [DSA 290-1] New sendmail-wide packages fix DoS and arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 290-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...