182 matches found
Design/Logic Flaw
Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 on 32-bit Windows 7 platforms allows remote attackers to cause a denial of service application crash or...
Use-after-free in shlwapi.dll — Mozilla
Security researchers Blair Strang and Scott Bell of Security Assessment found that when a parent window spawns and closes a child window that uses the file open dialog, a crash can be induced in shlwapi.dll on 32-bit Windows 7 systems. This crash may be potentially exploitable...
PT-2012-2575 · Mozilla +2 · Thunderbird Esr +6
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 4.x through 10.0 Firefox ESR versions 10.x before 10.0.3 Thunderbird versions 5.0 through 10.0 Thunderbird ESR versions 10.x before 10.0.3 SeaMonkey version before 2.8 Description: The issue allows remote attackers to...
cups: latent privilege escalation vulnerability
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the 1 /var/cache/cups/remote.cache or 2 /var/cache/cups/job.cache file...
DEBIAN-CVE-2010-2431
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the 1 /var/cache/cups/remote.cache or 2 /var/cache/cups/job.cache file...
Dolphin 2.0 (.elf) Local Daniel Of Service
Exploit for windows platform in category dos / poc ========================================== Dolphin 2.0 .elf Local Daniel Of Service ========================================== Site: http://www.nullbyte.org.il Dolphin 2.0 is vulnerable to local denial of service attack. When we try to open a fil...
Dolphin 2.0 - '.elf' Local Denial of Service
Site: http://www.nullbyte.org.il Dolphin 2.0 is vulnerable to local denial of service attack. When we try to open a file by 'OpenCTRL+O' that contains 9999 chars 'A', so dolphin should crash. PoC / Code: $buffer = strrepeat'A', 99999; Create 9999 chars'A'.. iffileputcontents'crash.elf', $buffer...
Samba security vulnerabilities
smbclient format string vulnerability, ability to change file permissions if file is already open...
SonicWALL Global Security Client privilege escalation
SYSTEM privileges are not dorpped on file open dialog...
POP Peeper 3.4.0.0 .html file Universal SEH Overwrite Exploit
No description provided by source. POP Peeper 3.4.0.0 .html file Universal SEH Overwrite Exploit Exploit By Stack Mountassif Moad How to use : file Open message or Ctrl + O Select The .html file ...... Connect With 5555 Port C:\ncnc -v 127.0.0.1 5555 DNS fwd/rev mismatch: localhost !=...
POP Peeper 3.4.0.0 - '.html' Universal Overwrite (SEH)
POP Peeper 3.4.0.0 .html file Universal SEH Overwrite Exploit Exploit By Stack Mountassif Moad How to use : file Open message or Ctrl + O Select The .html file ...... Connect With 5555 Port C:\ncnc -v 127.0.0.1 5555 DNS fwd/rev mismatch: localhost != stack-a4eeb2267 localhost 127.0.0.1 5555 ? ope...
快客电邮(QuarkMail)远程命令执行漏洞
快客电邮（QuarkMail）是北京雄智伟业科技公司推出的电子邮件系统，被广泛用于各个领域的电子邮件解决方案，其webmail部分使用perl cgi编写，但是80sec在其系统中发现一个重大的安全漏洞，导致远程用户可以在邮件系统上以当前进程身份执行任意命令，从而进一步控制主机或者系统。 QuarkMail错误地使用perl的open函数以打开文件，实现模板等功能，但是其对用户传入的参数没有做有效的过滤，从而导致一个命令执行漏洞。 登录进入系统之后访问如下URL...
vim multiple security vulnerabilities
Code execution on file open...
Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...
Design/Logic Flaw
EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...
CVE-2006-2154
EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...
CVE-2006-2154
EMC Retrospect for Windows is affected: versions 6.5 prior to 6.5.382, 7.0 prior to 7.0.344, and 7.5 prior to 7.5.1.105 do not drop privileges before opening files, allowing a local user to execute arbitrary code via the File>Open dialog. Root cause: failure to drop privileges prior to file ac...
CVE-2006-2154
EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the FileOpen dialog...
[UNIX] FACE CONTROL CMS vis.pl Directory Traversal
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2005-2579
Nortel Contivity VPN Client V0501.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box...