5247 matches found
PHP universal password-vulnerability warning-the black bar safety net
To be honest if a site front Desk are injection vulnerabilities, then empirically, the Universal password into the background of the probability is substantially One hundred percent. But some people say about PHP's station if GPC magic conversion turned on, it will be on a special symbol, the...
RedHat Update for tetex RHSA-2010:0400-01
Check for the Version of tetex OpenVAS Vulnerability Test RedHat Update for tetex RHSA-2010:0400-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
Action Network(DVbbs) Ver 8.3.0 multiple cross-site vulnerabilities-vulnerability warning-the black bar safety net
Dynamic network Forum as currently domestic maximum of Community Forum software service provider, relies on its powerful of features, phenomenal access speed and load capacity, and friendly convenient of customer operation interface, quality customer service, leading technology and strong and...
Buffer overflow
Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."...
Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires user interaction in that a victim must open a malicious PUB file. The specific flaw exists within the code responsible for converting files from the Publishe...
Memory corruption
Microsoft Windows Media Player 11 does not properly perform colorspace conversion, which allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2010-1042
Microsoft Windows Media Player 11 is affected by CVE-2010-1042 due to an error in colorspace conversion when processing crafted .AVI files. The vulnerability can lead to a denial of service (memory corruption) and possibly arbitrary code execution. OpenVAS entries corroborate a Denial of Service ...
array index error in dtoa implementation of many products
Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...
Microsoft Windows Media Player 11 - '.AVI' File Colorspace Conversion Remote Memory Corruption
source: https://www.securityfocus.com/bid/38790/info Microsoft Windows Media Player is prone to a remote memory-corruption vulnerability when handling specially crafted AVI files. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file with the vulnerable...
mozilla -- multiple vulnerabilities
Mozilla Project reports: MFSA 2010-07 Fixes for potentially exploitable crashes ported to the legacy branch MFSA 2010-06 Scriptable plugin execution in SeaMonkey mail MFSA 2009-68 NTLM reflection vulnerability MFSA 2009-62 Download filename spoofing with RTL override MFSA 2009-59 Heap buffer...
[SECURITY] Fedora 12 Update: argyllcms-1.0.4-5.fc12
The Argyll color management system supports accurate ICC profile creation f or scanners, CMYK printers, film recorders and calibration and profiling of displays. Spectral sample data is supported, allowing a selection of illuminants obse rver types, and paper fluorescent whitener additive...
ZDI-10-021: Novell NetStorage xsrvd Long Pathname Remote Code Execution Vulnerability
ZDI-10-021: Novell NetStorage xsrvd Long Pathname Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-021 February 23, 2010 -- Affected Vendors: Novell -- Affected Products: Novell NetStorage -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers...
Multiple Browsers - Address bar Characters
Securitylab.ir Application Info: Name: Internet Explorer Version: 8.0 Other tested browsers that also automatically convert "" to "/": - Firefox v3.6 - Google Chrome 4.0.249.78 36714 Vulnerability: IE address bar characters into a small feature My IE 8 on the address bar will automatically enter...
Mod_proxy From Apache 1.3 Integer Overflow
Name: Modproxy from apache 1.3 - Integer overflow which causes heap overflow. Author: Adam Zabrocki or Date: Jan 27, 2010 Issue: Modproxy from apache 1.3.xx tested on latest version - 1.3.41 allows local and remote attackers to overflow buffer on heap via integer overflow vulnerability...
[SECURITY] Fedora 11 Update: gif2png-2.5.1-1102.fc11
The gif2png program converts files from the obsolescent Graphic Interchange Format to Portable Network Graphics. The conversion preserves all graphic information, including transparency, perfectly. The gif2png program can even recover data from corrupted GIFs. There exists a 'web2png' program in ...
Fedora Core 11 FEDORA-2009-13634 (viewvc)
The remote host is missing an update to viewvc announced via advisory FEDORA-2009-13634. OpenVAS Vulnerability Test $Id: fcore200913634.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13634 viewvc Authors: Thomas Reinke Copyright: Copyright c 2009...
LiveZilla 3.1.8.3 - Cross-Site Scripting
Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits: InterN0T External Links:...
Apache Httpd < 1.3.42 : mod_proxy overflow on 64-bit systems
An incorrect conversion between numeric types flaw was found in the modproxy module which affects some 64-bit architecture systems. A malicious HTTP server to which requests are being proxied could use this flaw to trigger a heap buffer overflow in an httpd child process via a carefully crafted...
Fedora 12 : viewvc-1.1.3-1.fc12 (2009-13610)
security fix: add root listing support of per-root authz config security fix: query.py requires 'forbidden' authorizer or none in config fix URL- ification of truncated log messages issue 3 fix regexp input validation issue 426, 427, 440 add support for configurable tab-to-spaces conversion fix...
Fedora 11 : viewvc-1.1.3-1.fc11 (2009-13634)
security fix: add root listing support of per-root authz config security fix: query.py requires 'forbidden' authorizer or none in config fix URL- ification of truncated log messages issue 3 fix regexp input validation issue 426, 427, 440 add support for configurable tab-to-spaces conversion fix...