CA BrightStor ARCserve Backup Tape Engine RPC Procedure Memory Corruption (CVE-2007-1447)

A memory corruption vulnerability has been reported in CA BrightStor ARCserve. The vulnerability is due to improper data validation when processing stub data of an RPC call made to the Tape Engine. A remote attacker can exploit this issue by performing a malicious RPC call to a vulnerable server...

Apple Quicktime TeXML sampleData Element Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X...

Microsoft .NET Framework Serialization Data Validation Error (MS12-035; CVE-2012-0160)

A remote code execution vulnerability has been reported in the Microsoft .NET Framework...

Imagemagic multiple security vulnerabilities

Buffer overflows, insufficient user supplied data validation...

SuSE 11.1 Security Update : LibreOffice (SAT Patch Number 6003)

The update fixes the following security issues : - 740453: Vulnerability in RDF handling. CVE-2012-0037 - 752595: overflow in jpeg handling CVE-2012-1149 This update also fixes the following non-security issues : Extras : - add SUSE color palette fate312645 Filters : - crash when loading embedded...

[waraxe-2012-SA#083] - Multiple Vulnerabilities in Uploadify 2.1.4

waraxe-2012-SA083 - Multiple Vulnerabilities in Uploadify 2.1.4 =============================================================================== Author: Janek Vind "waraxe" Date: 05. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-83.html Description of vulnerable software:...

Microsoft Office Drawing Object Code Execution (MS07-025; CVE-2007-1747)

A remote code execution vulnerability has been reported in Microsoft Office. The vulnerability is due to insufficient data validation by the application when parsing Office drawing objects. A remote attacker may exploit this vulnerability by enticing target users to open a specially crafted Offic...

Multiple Products IASystemInfo.DLL ActiveX Control Buffer Overflow (CVE-2007-0348)

A remote code execution vulnerability has been reported in multiple products containing the IASystemInfo.DLL ActiveX control. The vulnerability is due to a data validation failure by the ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a...

Multiple Products NCTAudioFile2 ActiveX Control Buffer Overflow (CVE-2007-0018)

A remote code execution vulnerability has been reported in the NCTAudioFile2 ActiveX control. The vulnerability is due to a data validation failure by the NCTAudioFile2 ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow (CVE-2007-1689)

A remote code execution vulnerability has been reported in Symantec Norton Internet Security 2004. The vulnerability is due to data validation failure by the ISAlertDataCOM ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted...

[PT-2011-21] SQL injection vulnerability in OneOrZero AIMS

---------------------------------------------------------------------- PT-2011-21 Positive Technologies Security Advisory SQL injection vulnerability in OneOrZero AIMS ---------------------------------------------------------------------- ---Vulnerable software OneOrZero AIMS Version: 2.7.0 and...

Zenturi ProgramChecker ActiveX Components ActiveX Controls Buffer Overflows (CVE-2007-2987)

Multiple buffer overflow vulnerabilities have been reported in Zenturi ProgramChecker. The vulnerabilities are due to a data validation failure, resulting in a buffer overflow. A remote attacker may exploit these vulnerabilities by enticing a target user to open a specially crafted HTML file...

WordPress BackWPUp Plugin 2.1.4 - Code Execution

BackWPup is prone to a code execution vulnerability that can be exploited to execute local or remote code on the web server. It allows an attacker to specify FTP resources as input by using a lack of data validation on the BackWPUpJobTemp POST parameter of job/wpexportgenerate.php. Solution Upgra...

WordPress Plugin BackWPUp 2.1.4 - Code Execution

Sense of Security - Security Advisory - SOS-11-012 Release Date. 17-Oct-2011 Vendor Notification Date. 14-Oct-2011 Product. BackWPUp Platform. WordPress Affected versions. 2.1.4 Severity Rating. High Impact. System access Attack Vector. Remote without authentication Solution Status. Upgrade to...

WordPress BackWPUp Plugin 2.1.4 Code Execution

Exploit for php platform in category web applications Sense of Security - Security Advisory - SOS-11-012 Release Date. 17-Oct-2011 Vendor Notification Date. 14-Oct-2011 Product. BackWPUp Platform. WordPress Affected versions. 2.1.4 Severity Rating. High Impact. System access Attack Vector. Remote...

Citrix Provisioning Services Opcode 40020010 Stack Buffer Overflow

A stack buffer overflow vulnerability has been reported in Citrix Provisioning Service. Citrix Provisioning Service facilitates image management for virtual and physical workloads services, by allowing computers to obtain applications from the network in real-time. The vulnerability is due to...

A Really Simple Chat Multiple SQL Injection Vulnerabilities

A Really Simple Chat is prone to multiple SQL injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Excel Data Validation Record Parsing Overflow

Added: 06/15/2011 CVE: CVE-2011-0105 BID: 47256 OSVDB: 71765 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2002 versions lacking the patch detailed in Microsoft Security Advisory...

Microsoft Excel Data Validation Record Parsing Overflow

Added: 06/15/2011 CVE: CVE-2011-0105 BID: 47256 OSVDB: 71765 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2002 versions lacking the patch detailed in Microsoft Security Advisory...

Microsoft Excel Data Validation Record Parsing Overflow

Added: 06/15/2011 CVE: CVE-2011-0105 BID: 47256 OSVDB: 71765 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2002 versions lacking the patch detailed in Microsoft Security Advisory...