Cross site scripting

Cross-site scripting XSS vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method...

CVE-2008-1232

Cross-site scripting XSS vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method...

DEBIAN-CVE-2008-3162

Stack-based buffer overflow in the strreadpacket function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted STR file that interleaves audio and video sectors...

Format string

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

DEBIAN-CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

corehttp-overflow.txt

/ corehttpv0.5.3alpha: httpd remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xcorehttp.c -o xcorehttp syntax: ./xcorehttp -r -h host -p port corehttp homepage/url: http://corehttp.sourceforge.net/ bughttp.c:...

Mandrake Linux Security Advisory : tetex (MDKSA-2007:109)

Buffer overflow in the gdImageStringFTEx function in gdft.c in the GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font. Tetex 3.x uses an embedded copy of the...

CVE-2007-1700

The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the...

CVE-2007-1700

CVE-2007-1700 describes a vulnerability in PHP where the session extension pre-4.4.5 (and pre-5.2.1) incorrectly calculates the session variable reference count, failing to account for the internal pointer in the session globals. This can allow context-dependent attackers to execute arbitrary cod...

Buffer overflow

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

CVE-2007-0455

CVE-2007-0455 is a buffer over-read in libgd2/libgd (GD Graphics Library) prior to 2.0.34 that affects the gdImageStringFTEx path in gdft.c. A crafted string using a JIS-encoded font could crash the PHP interpreter or, in some contexts, allow arbitrary code execution on the remote host. Public re...

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font...

CVE-2006-3647

Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than...

CVE-2006-4693

Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651...

CVE-2006-4693: Undefined Security Weakness

Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651...

Juniper NetScreen Security Manager (NSM) guiSrv/devSrv Crafted String Remote DoS

The version of Juniper NetScreen-Security Manager NSM installed on the remote host may allow an attacker to deny service to legitimate users using specially crafted long strings to the guiSrv and devSrv processes. A watchdog service included in Juniper NSM, though, automatically restarts the...

CVE-2005-4587: Undefined Security Weakness

Juniper NetScreen-Security Manager NSM 2004 FP2 and FP3 allow remote attackers to cause a denial of service crash or hang of server components that are automatically restarted via a long crafted string on 1 port 7800 the GUI Server port or 2 port 7801 the Device Server port...