Microsoft SQL Server On-Disk MTF Data Structures Remote Memory Corruption Vulnerability

Description Microsoft SQL Server is prone to a remote memory-corruption vulnerability because it fails to perform adequate boundary checks on user-supplied input. Authenticated attackers can exploit this issue to execute arbitrary code in the context of the server. Failed attacks will likely caus...

Code injection

Unspecified vulnerability in Microsoft Malware Protection Engine mpengine.dll 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service disk space exhaustion via a file with "crafted data structures" that trigger the creatio...

CVE-2008-1438

Unspecified vulnerability in Microsoft Malware Protection Engine mpengine.dll 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service disk space exhaustion via a file with "crafted data structures" that trigger the creatio...

CVE-2008-1438

CVE-2008-1438 concerns the Microsoft Malware Protection Engine (mpengine.dll) (versions 1.1.3520.0 and 0.1.13.192) used in multiple Microsoft products. A denial-of-service exists when parsing certain files with “crafted data structures,” causing disk-space exhaustion and automatic engine restart....

CVE-2008-1438: Undefined Security Weakness

Unspecified vulnerability in Microsoft Malware Protection Engine mpengine.dll 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service disk space exhaustion via a file with "crafted data structures" that trigger the creatio...

CVE-2008-1150: Undefined Security Weakness

The virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service resource exhaustion via a series of PPTP sessions, related to the persistence of interface descriptor block IDB data structures after process termination, aka bug ID...

[SECURITY] Fedora 8 Update: glib2-2.14.6-1.fc8

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. This package provides versi...

BitchX 1.1-final (EXEC) Remote Command Execution Exploit

No description provided by source. / Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions: 1.1-final and others? Synopsis: BitchX suffers from a unchecked bounds in a hash table in hook.c where one can inject data structures allowing for the remote execution of commands! Usage:...

BitchX 1.1-final (EXEC) Remote Command Execution Exploit

Exploit for linux platform in category remote exploits ======================================================== BitchX 1.1-final EXEC Remote Command Execution Exploit ======================================================== / Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions:...

BitchX 1.1-final - 'EXEC' Remote Command Execution

/ Name: PBXS - Pointless BitchX Sploit Author: clarity Infected Versions: 1.1-final and others? Synopsis: BitchX suffers from a unchecked bounds in a hash table in hook.c where one can inject data structures allowing for the remote execution of commands! Usage: Execute "gcc -o pbxs pbxs.c; ./pbxs...

Authentication flaw

eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures...

CVE-2007-2638

eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures...

CVE-2007-2638

eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures...

CVE-2006-6102

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures...

CVE-2006-6054

The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service crash via an ext2 stream with malformed data structures that triggers an error in the ext2checkpage due to a length that is smaller than the minimum...

CVE-2006-6053

The ext3fsdirhash function in Linux kernel 2.6.x allows local users to cause a denial of service crash via an ext3 stream with malformed data structures...

CVE-2006-5726

alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service memory corruption by mounting crafted UFS filesystems with malformed data structures...

Greasemonkey 0.3.3 - Multiple Remote Information Disclosure Vulnerabilities

Greasemonkey 0.3.3 - Multiple Remote Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/14336/info Greasemonkey is susceptible to multiple remote information disclosure vulnerabilities. These issues are due to a design error allowing insecure JavaScript functions to ...

FreeBSD : mysql-server -- multiple remote vulnerabilities (619ef337-949a-11d9-b813-00d05964249f)

SecurityFocus reports : MySQL is reported prone to an insecure temporary file creation vulnerability. Reports indicate that an attacker that has 'CREATE TEMPORARY TABLE' privileges on an affected installation may leverage this vulnerability to corrupt files with the privileges of the MySQL proces...

CVE-2003-0688

The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service process crash via an invalid DNS response that causes Sendmail to free incorrect data...