iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability

iDefense Security Advisory 12.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 11, 2007 I. BACKGROUND Microsoft DirectShow, part of Microsoft DirectX, is used for the capture and playback of multimedia streams on Microsoft Windows systems. Synchronized Accessible Media Interchange...

Unfixed XSS vulnerability at www.dod.com

Security researcher tenest, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.dod.com, which at the time of submission ranked 559387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at www.raggareggae.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.raggareggae.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at bayi.mercansoy.com.tr

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting bayi.mercansoy.com.tr, which at the time of submission ranked 1051430 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It ...

Windows Media Player 6.4 MP4 File Stack Overflow PoC

Exploit for unknown platform in category local exploits ==================================================== Windows Media Player 6.4 MP4 File Stack Overflow PoC ==================================================== !/bin/perl Windows media player 6.4 MP4 Stack Overflow 0-day discovered and...

[SECURITY] Fedora 8 Update: zabbix-1.4.2-4.fc8

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

Lotus Notes Lotus 1-2-3 file viewer buffer overflow

Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...

Unfixed XSS vulnerability at dvs.at

Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting dvs.at, which at the time of submission ranked 7096209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/06/2007. It is currently...

CVE-2007-6237

cp.php in DeluxeBB 1.09 fails to verify that the membercookie matches the authenticated member during profile updates, enabling remote authenticated users to change e-mails for arbitrary accounts via a modified membercookie parameter (a different vector than CVE-2006-4078). This can be leveraged ...

CVE-2007-6237

cp.php in DeluxeBB 1.09 does not verify that the membercookie parameter corresponds to the authenticated member during a profile update, which allows remote authenticated users to change the e-mail addresses of arbitrary accounts via a modified membercookie parameter, a different vector than...

Unfixed XSS vulnerability at 35.911-job.ru

Security researcher MaXWeL, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting 35.911-job.ru, which at the time of submission ranked 1627165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...

phpBB Garage 1.2.0 Beta3 - SQL Injection

phpBB Garage 1.2.0 Beta3 - SQL Injection Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

Unfixed XSS vulnerability at www.vazgectimsenden.com

Security researcher cyberthief, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting www.vazgectimsenden.com, which at the time of submission ranked 59080 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It ...

Unfixed Redirect vulnerability at 0-www.fbi.gov.mill1.sjlibrary.org

Security researcher www.r3t.n3t.nl, has submitted on 27/11/2007 a Redirect vulnerability affecting 0-www.fbi.gov.mill1.sjlibrary.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Lotus Notes TagAttributeListCopy buffer overflow

Added: 11/21/2007 CVE: CVE-2007-4222 BID: 26200 OSVDB: 40949 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the TagAttributeListCopy function in nnotes.dll could allow command execution when a user receives a specially crafted e-mail message and forwar...

Unfixed XSS vulnerability at www.torrentvalley.com

Security researcher Uber0n, has submitted on 21/11/2007 a cross-site-scripting XSS vulnerability affecting www.torrentvalley.com, which at the time of submission ranked 5276 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is...

Lotus Notes TagAttributeListCopy buffer overflow

Added: 11/21/2007 CVE: CVE-2007-4222 BID: 26200 OSVDB: 40949 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the TagAttributeListCopy function in nnotes.dll could allow command execution when a user receives a specially crafted e-mail message and forwar...

CVE-2007-6029

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...