5590 matches found
Microsoft ASP.NET 1.0/1.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/12574/info It is reported that ASP.NET is prone to various cross-site scripting attacks. These issues when ASP.NET converts Unicode characters ranging from U+ff00-U+ff60 to ASCII. Apparently, the application fails to properly validate Unicode characters...
Microsoft ASP.NET 1.01.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities
Microsoft ASP.NET 1.01.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12574/info It is reported that ASP.NET is prone to various cross-site scripting attacks. These issues when ASP.NET converts Unicode characters ranging fr...
GLSA-200501-20 : o3read: Buffer overflow during file conversion
The remote host is affected by the vulnerability described in GLSA-200501-20 o3read: Buffer overflow during file conversion Wiktor Kopec discovered that the parsehtml function in o3read.c copies any number of bytes into a 1024-byte t array. Impact : Using a specially crafted file, possibly...
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded...
o3read: Buffer overflow during file conversion
Background o3read is a standalone converter for OpenOffice.org files. It allows a user to dump the contents tree o3read and convert to plain text o3totxt or to HTML o3tohtml Writer and Calc files. Description Wiktor Kopec discovered that the parsehtml function in o3read.c copies any number of byt...
CVE-2004-0901
Microsoft Word for Windows 6.0 Converter MSWRD632.WPC, as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different...
CVE-2004-1255
Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text file that is converted to TIFF...
CVE-2004-0946
rquotad in nfs-utils rquotaserver.c before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request...
CVE-2004-0571
Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901...
CVE-2004-0946
rquotad in nfs-utils rquotaserver.c before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request...
CVE-2004-2637
The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions...
Oracle Character Conversion Bugs (#NISR2122004G)
NGSSoftware Insight Security Research Advisory Name: Oracle 10g character conversion bug Systems Affected: Oracle 10g/AS on all operating systems Severity: High risk Vendor URL: http://www.oracle.com/ Author: David Litchfield davidl at ngssoftware.com Relates to:...
CVE-2004-1255
CVE-2004-1255 involves a buffer overflow in the expandtabs function in 2fax 3.04, enabling remote code execution via a text file converted to TIFF. The vulnerability affects 2fax 3.04 and is exploitable over the network with low attack complexity and no authentication required, potentially yieldi...
CVE-2004-1255
Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text file that is converted to TIFF...
CVE-2004-0946
CVE-2004-0946 affects nfs-utils: the rquotad component (rquota_server.c) on 64-bit architectures performs an unsafe 32-bit assumption during memcpy, causing a stack-based buffer overflow. This could allow remote code execution via crafted NFS requests. Public advisories confirm a fix in updated n...
security flaw
rquotad in nfs-utils rquotaserver.c before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request...
O3Read 0.0.3 - HTML Parser Buffer Overflow
source: https://www.securityfocus.com/bid/12000/info o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is possible that files may originate from an...
O3Read 0.0.3 - HTML Parser Buffer Overflow
O3Read 0.0.3 - HTML Parser Buffer Overflow source: https://www.securityfocus.com/bid/12000/info o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is...
CVE-2004-0901
Microsoft Word for Windows 6.0 Converter MSWRD632.WPC, as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different...
CVE-2004-0901
CVE-2004-0901 (Font Conversion Vulnerability) affects WordPad’s Word for Windows 6.0 Converter (MSWRD632.WPC) used by WordPad. A crafted Word/RTF/WRI/ DOC file can trigger a buffer/length-check flaw, leading to remote code execution when opened by WordPad. Public advisories (MS04-041) document tw...