74 matches found
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the lynx-cur-wrapper package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Ubuntu: Security Advisory (USN-1642-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for lynx-cur USN-1642-1
Ubuntu Update for Linux kernel vulnerabilities USN-1642-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16421.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for lynx-cur USN-1642-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Thi...
CVE-2009-3513: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Pilot Group PG eTraining allow remote attackers to inject arbitrary web script or HTML via 1 the catid parameter to courseslogin.php, the id parameter to 2 newsread.php or 3 lessonslogin.php, or 4 the cur parameter in a start action to...
Debian: Security Advisory (DSA-1085-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Stack overflow
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...
CVE-2007-0038: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...
Debian DSA-1085-1 : lynx-cur - several vulnerabilities
Several vulnerabilities have been discovered in lynx, the popular text-mode WWW browser. The Common Vulnerabilities and Exposures Project identifies the following vulnerabilities : - CVE-2004-1617 Michal Zalewski discovered that lynx is not able to grok invalid HTML including a TEXTAREA tag with ...
CVE-2006-4231
IrfanView 3.98 with plugins allows remote attackers to cause a denial of service application crash via a crafted CUR image file...
CVE-2006-4231
IrfanView 3.98 with plugins allows remote attackers to cause a denial of service application crash via a crafted CUR image file...
CVE-2006-4231
CVE-2006-4231 affects IrfanView 3.98 (with plugins). A crafted CUR image file can cause a denial of service (application crash). The vulnerability is described in the NVD entry for CVE-2006-4231 and corroborated by the related CVE records; no exploitation details or specific exploit code are prov...
CVE-2006-4231: Undefined Security Weakness
IrfanView 3.98 with plugins allows remote attackers to cause a denial of service application crash via a crafted CUR image file...
Berlios GPSD 1.91-1 < 2.7-2 - Format String
require 'msf/core' class Metasploit3 'Berlios GPSD Format String Vulnerability', 'Description' = %q This module exploits a format string vulnerability in the Berlios GPSD server. This vulnerability was discovered by Kevin Finisterre. , 'Author' = 'Yann Senotier ' , 'License' = MSFLICENSE, 'Versio...
CVE-2004-1617: Improper Input Validation
Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service infinite loop via a web page or HTML email that contains invalid HTML including 1 a TEXTAREA tag with a large COLS value and 2 a large tag name in an element that is not terminated, as demonstrated ...