[Full-disclosure] ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability

ZDI-07-047: Microsoft Windows Media Player Malformed Skin Header Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-047.html August 14, 2007 -- CVE ID: CVE-2007-3035 -- Affected Vendor: Microsoft -- Affected Products: Windows Media Player 7.1 Windows Media Player 9...

[Full-disclosure] ZDI-07-046: Microsoft Windows Media Player Skin Parsing Size Mismatch Heap Overflow Vulnerability

ZDI-07-046: Microsoft Windows Media Player Skin Parsing Size Mismatch Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-046.html August 14, 2007 -- CVE ID: CVE-2007-3037 -- Affected Vendor: Microsoft -- Affected Products: Windows Media Player 7.1 Windows Media Player ...

Novell Client 4.91 SP4 nwspool.dll buffer overflow

Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...

Novell Client 4.91 SP4 nwspool.dll buffer overflow

Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...

ZDI-07-045: Novell Client NWSPOOL.DLL Stack Overflow Vulnerability

ZDI-07-045: Novell Client NWSPOOL.DLL Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-045.html August 6, 2007 -- CVE ID: Pending Assignment -- Affected Vendor: Novell -- Affected Products: Novell Netware Client -- TippingPointTM IPS Customer Protection: TippingPoin...

ZDI-07-043: Ipswitch IMail IMAP Daemon SUBSCRIBE Stack Overflow Vulnerability

ZDI-07-043: Ipswitch IMail IMAP Daemon SUBSCRIBE Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-043.html July 24, 2007 -- CVE ID: CVE-2007-2795 -- Affected Vendor: Ipswitch -- Affected Products: Ipswitch IMail Ipswitch Collaboration Suite -- TippingPointTM IPS...

ZDI-07-041: Panda Software AdminSecure Agent Heap Overflow Vulnerability

ZDI-07-041: Panda Software AdminSecure Agent Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-041.html July 24, 2007 -- CVE ID: CVE-2007-3026 -- Affected Vendor: Panda Software -- Affected Products: Panda AdminSecure 2006 -- TippingPointTM IPS Customer Protection:...

ZDI-07-042: Ipswitch IMail Server GetIMailHostEntry Memory Corruption Vulnerability

ZDI-07-042: Ipswitch IMail Server GetIMailHostEntry Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-042.html July 24, 2007 -- CVE ID: CVE-2007-2795 -- Affected Vendor: Ipswitch -- Affected Products: Ipswitch IMail Ipswitch Collaboration Suite -- TippingPointTM I...

Remote Command Exec (FireFox 2.0.0.5 et al)

By: Nate McFeters nate dot mcfeters -at- gmail Billy BK Rios billy dot rios -at- gmail Tested in FireFox 2.0.0.5 and 3.0a6, Netscape Navigator 9, and Mozilla browser. NOTE These examples were created for WinXP SP2 with no external mail programs installed outlook, notes…etc. If you have an externa...

Microsoft Internet Explorer 0-day vulnerability

Unfiltered shell characters on executed URL: protocol application handler...

TISA2007-06-Public.txt

========================================================================= TeamIntell Security Advisory TISA2007-06-Public ------------------------------------------------------------------------- Element CMS "s" parameter script insertion vulnerability...

[Full-disclosure] ZDI-07-040: Symantec AntiVirus Engine CAB Parsing Heap Overflow Vulnerability

ZDI-07-040: Symantec AntiVirus Engine CAB Parsing Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-040.html July 12, 2007 -- CVE ID: CVE-2007-0447 -- Affected Vendor: Symantec -- Affected Products: Symantec AntiVirus Engine -- TippingPointTM IPS Customer Protection:...

[Full-disclosure] ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability

ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-039.html July 12, 2007 -- CVE ID: CVE-2007-3699 -- Affected Vendor: Symantec -- Affected Products: Symantec AntiVirus Engine -- TippingPointTM IPS Customer Protection:...

NeoTracePro 3.25 - ActiveX 'TraceTarget()' Remote Buffer Overflow

Date: 24/03/07 México / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / I found this buffer overflow fuzzing NeoTraceExplorer.dll an ActiveX Control with ComRaider from iDefense. It has a method called TraceTarget which can be exploited passing a large string 486 bytes due there's no...

Girlserv ads <= 1.5 (details_news.php) SQL Injection Vulnerability

No description provided by source. Girlserv ads = 1.5 Remote SQL Injection Vulnerability Found By : Cold z3ro , [email protected] Homepages : http://hackteach.org , http://h4ps.com Script : http://www.girlserv-demo.com/girlserv-ads1.5.zip For Admin :...

Girlserv ads 1.5 - details_news.php SQL Injection

Girlserv ads 1.5 - detailsnews.php SQL Injection Girlserv ads = 1.5 Remote SQL Injection Vulnerability Found By : Cold z3ro , [email protected] Homepages : http://hackteach.org , http://h4ps.com Script : http://www.girlserv-demo.com/girlserv-ads1.5.zip For Admin :...

MS Windows DirectSpeechSynthesis Module Remote BoF Exploit win2k

No description provided by source. !-- 01/06/2007 23.19.50 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll / DirectSpeechRecognition Module Xlisten.dll remote buffer overflow exploit / 2k sp4 seh version both the dlls are located in %SystemRoot%\speech folder and they are vulnerable to...

[Full-disclosure] ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability

ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-034.html June 5, 2007 -- CVE ID: CVE-2007-2863 -- Affected Vendor: Computer Associates -- Affected Products: CA Anti-Virus eTrust EZ Antivirus CA Internet...

About the audio file denial of service attacks-vulnerability warning-the black bar safety net

0 6 the end of the year, I and Secunia maillist friends discuss when abroad of a friend to modify a Windows Media on the denial of service attack PoC, but at the time this is not a concern, I and this friend just a simple exchange, release out on the end, and then didn't take it to heart. The tim...

Microsoft Excel Named Graph record buffer overflow

Added: 05/24/2007 CVE: CVE-2007-0215 BID: 23760 OSVDB: 34393 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem A buffer overflow vulnerability in Microsoft Excel allows command execution when a user opens a speciall...