POP Peeper UIDL处理栈溢出漏洞

BUGTRAQ ID: 33926 POP Peeper是运行在Windows任务栏中的邮件通知程序，当接收到新邮件时会给出提示。 POP Peeper的客户端在检索邮件时存在栈溢出漏洞。当用户试图连接到用作了POP3守护程序的邮件服务器时，POP Peeper客户端会使用UIDL命令获得所要检索的每封邮件的特定ID。如果恶意服务器发送了超过1040字节的超长ID的话，就可以溢出栈上缓冲区，允许攻击者完全控制进程。 Mortal Universe Software Entertainment POP Peeper 3.4.0.0 厂商补丁： Mortal Universe Softwar...

HDHomeRun Discovery Service Detection

The remote service implements HDHomeRun's discovery service. HDHomeRun is a device for streaming digital TV signals over a network, and its discovery service allows software such as Windows Media Center or MythTV to locate such devices. C Tenable Network Security, Inc. include"compat.inc"; if...

JVN#47875752 GungHo LoadPrgAx vulnerable to arbitrary Java program execution

LoadPrgAx from GungHo Online Entertainment, Inc. is an ActiveX control that runs games provided by the company. LoadPrgAx contains a vulnerability that allows an attacker to execute an arbitrary Java program that resides on a user's PC. Impact If a user views a specially crafted HTML document web...

turnkeyforms Entertainment Portal 2.0 Insecure Cookie Handling Vuln

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

TurnkeyForms Entertainment Portal 2.0 - Insecure Cookie Handling

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

turnkeyforms Entertainment Portal 2.0 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications =================================================================== turnkeyforms Entertainment Portal 2.0 Insecure Cookie Handling Vuln ===================================================================...

TurnkeyForms Entertainment Portal 2.0 - Insecure Cookie Handling

TurnkeyForms Entertainment Portal 2.0 - Insecure Cookie Handling ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

The big data library default address-vulnerability warning-the black bar safety net

data/dvbbs7. mdb Action Network Forum database /databackup/dvbbs7. mdb Action Network Forum database /bbs/databackup/dvbbs7. mdb Action Network Forum database /admin/data/qcdnnews. mdb green to create article management system database /data/qcdnnews. mdb green to create article management system...

entertainmentdir-sql.txt

--==+================================================================================+==-- --==+ Entertainment Directory = 1.1 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On:...

Entertainment Directory <= 1.1 SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Entertainment Directory = 1.1 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered...

Entertainment Directory 1.1 - SQL Injection

--==+================================================================================+==-- --==+ Entertainment Directory = 1.1 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On:...

Entertainment Directory 1.1 - SQL Injection

Entertainment Directory 1.1 - SQL Injection --==+================================================================================+==-- --==+ Entertainment Directory = 1.1 SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

Entertainment Directory <= 1.1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Entertainment Directory = 1.1 SQL Injection Vulnerability ==========================================================...

CVE-2007-5711

Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service failed assertion and daemon crash via a large packet to TCP or UDP port 48000...

Code injection

Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service failed assertion and daemon crash via a large packet to TCP or UDP port 48000...

CVE-2007-5711

The CVE-2007-5711 entry concerns Massive Entertainment’s World in Conflict (versions 1.001 and earlier). The vulnerability allows remote attackers to cause a denial-of-service (via a large packet) by targeting TCP or UDP port 48000. The provided documents do not include concrete exploitation vect...

CVE-2007-5711

Massive Entertainment World in Conflict 1.001 and earlier allows remote attackers to cause a denial of service failed assertion and daemon crash via a large packet to TCP or UDP port 48000...

NULL pointer crash in World in Conflict 1.000

Luigi Auriemma Application: World in Conflict http://www.worldinconflict.com Versions: = 1.000 Platforms: Windows Bug: access to NULL pointer Exploitation: remote, versus server Date: 09 Oct 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4...

CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...

CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...