Lucene search
K

163 matches found

CNVD
CNVD
added 2015/06/10 12:0 a.m.3 views

Microsoft Windows Media Player Remote Code Execution Vulnerability

Microsoft Windows Media Player is a free media player. A security vulnerability in Microsoft Windows Media Player's handling of specially crafted DataObjects allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

9.3CVSS7.3AI score0.26887EPSS
Exploits0References1
myhack58
myhack58
added 2013/08/05 12:0 a.m.22 views

FreeCms command execution(Ognl execution sequence bypass vulnerability reference EXP)-vulnerability warning-the black bar safety net

Open source free java CMS - FreeCMS1. 3-Data Objects-mail Project address: https://code.google.com/p/freecms/ Prior to the announcement of the EXP using a tool is no good, but you can with me before the release of a tool to execute commands, write shell. Vulnerability description see EXP3 using t...

0.1AI score
Exploits0
Vulnerability Lab
Vulnerability Lab
added 2012/04/13 12:0 a.m.30 views

EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities

Document Title: =============== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=503 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 503...

7.1AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2011/04/27 12:0 a.m.1 views

Microsoft Collaboration Data Objects Buffer Overflow (MS05-048; CVE-2005-1987)

Microsoft Collaboration Data Objects CDO are a set of COM objects made for the IIS SMTP service and Exchange servers that provide the ability to build messaging and collaboration applications. A buffer overflow vulnerability exists in Microsoft Collaboration Data Objects. The vulnerability is...

7.5CVSS6.5AI score0.57021EPSS
Exploits0
Symantec
Symantec
added 2010/03/24 12:0 a.m.13 views

Microsoft Data Access Components ActiveX Data Objects Memory Corruption Vulnerability

Description Microsoft Data Access Components are prone to a remote memory-corruption vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the...

0.6AI score
Exploits0References5Affected Software7
OSV
OSV
added 2009/03/05 12:0 a.m.22 views

DSA-1734-1 opensc - information disclosure

Bulletin has no description...

2.1CVSS6.3AI score0.00384EPSS
Exploits1
Cvelist
Cvelist
added 2009/03/02 10:0 p.m.21 views

CVE-2009-0368

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a 1 low level APDU command or 2 debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program...

7.4AI score0.00384EPSS
Exploits1References15
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/10/22 8:49 a.m.1 views

Internet Explorer vulnerable in handling CDO protocol

Overview Internet Explorer is vulnerable in handling CDO Collaboration Data Objects protocol, which allows the download dialog box to be bypassed. When Internet Explorer IE accesses a website using CDO Collaboration Data Objects, IE processes the contents as CDO data, ignoring their actual conten...

4.3CVSS6.5AI score0.31298EPSS
Exploits1References12
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/10/20 12:0 a.m.32 views

JVN#55410403 Internet Explorer vulnerable in handling CDO protocol

When Internet Explorer IE accesses a website using CDO Collaboration Data Objects, IE processes the contents as CDO data, ignoring their actual content types, and IE does not properly handle the Content-Disposition header field. This could cause a download dialog box not to be displayed prior to...

4.3CVSS5.9AI score0.31298EPSS
Exploits1
NVD
NVD
added 2005/10/13 10:2 a.m.16 views

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

7.5CVSS7.7AI score0.57021EPSS
Exploits0References19
Cvelist
Cvelist
added 2005/10/13 4:0 a.m.18 views

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

7.7AI score0.57021EPSS
Exploits0References19
CVE
CVE
added 2005/10/13 4:0 a.m.60 views

CVE-2005-1987

CVE-2005-1987 is a remote code execution vulnerability in Microsoft Collaboration Data Objects (CDO) used by CDOSYS/CDOEX on Windows and Exchange. An unchecked buffer triggered by processing a malformed SMTP/email header (e.g., oversized Content-Type) can allow an attacker to execute arbitrary co...

7.5CVSS7.7AI score0.57021EPSS
Exploits0References19Affected Software1
securityvulns
securityvulns
added 2005/10/13 12:0 a.m.25 views

Microsoft Windows Microsoft Collaboration Data Objects buffer overflow

Buffer overflow on parsing mail messages with Microsoft SMTP service...

4.1AI score
Exploits0References2Affected Software1
securityvulns
securityvulns
added 2005/10/12 12:0 a.m.47 views

Microsoft Security Bulletin MS05-048 Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)

Microsoft Security Bulletin MS05-048 Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution 907245 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows or Microsoft Exchange Server Impact of...

7.5CVSS0.8AI score0.57021EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2005/10/11 12:0 a.m.27 views

MS05-048: Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)

An unchecked buffer condition could allow an attacker to execute arbitrary code on the remote host. To execute this flaw, an attacker would need to send a malformed message via SMTP to the remote host, either by using the SMTP server if Exchange is installed or by sending an email to a user on th...

7.5CVSS6.3AI score0.57021EPSS
Exploits0References2
CERT
CERT
added 2005/10/11 12:0 a.m.26 views

Microsoft Collaboration Data Objects buffer overflow

Overview A buffer overflow in Microsoft Collaboration Data Objects may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Collaboration Data Objects CDO is a scripting library used to develop applications that handle email. Note that C...

7.5CVSS7.3AI score0.57021EPSS
Exploits0References1
CVE
CVE
added 2005/06/28 4:0 a.m.37 views

CVE-2002-1918

CVE-2002-1918 describes a buffer overflow in Microsoft Active Data Objects (ADO) within Microsoft MDAC versions 2.5–2.7. The description identifies the vulnerability as enabling remote attackers to cause impact with unknown scope and unknown attack vectors; no concrete impact, vector, or remediat...

10CVSS7.3AI score0.32483EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2002/12/31 5:0 a.m.10 views

CVE-2002-1918

Buffer overflow in Microsoft Active Data Objects ADO in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED...

10CVSS6.9AI score0.32483EPSS
Exploits0References3
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.8 views

Security Update for Windows Server 2003 64-bit Itanium Edition (KB901017)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...

3AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.8 views

Security Update for Windows Server 2003 x64 Edition (KB901017)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system using Collaboration Data Objects CDO and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have ...

3AI score
Exploits0
Rows per page
Query Builder