Echo Security Advisory 2005.14

.OR.ID ECHOADV14$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in Liberum Help Desk --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 02nd 2005 Location: Indonesia, Jakarta Web:...

CVE-2005-1208: Undefined Security Weakness

Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help .CHM file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in...

High Risk Vulnerability in HTML Help (ITSS Parser)

Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in one of the dependencies of HTML Help, the InfoTech Storage System parser. This flaw can permit arbitrary code execution through a number of applications including HTML Help, Internet Explorer and Outlook/Outlook Express...

Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution (896358)

Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution 896358 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

[VulnWatch] eEye Advisory - EEYEB-20050316 - HTML Help File Parsing Buffer Overflow

EEYEB-20050316 - HTML Help File Parsing Buffer Overflow Release Date: June 14, 2005 Date Reported: March 16, 2005 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 98 / 98 SE Windows Me Windows 2000 Service Pack 3 / Service Pack 4 Windows XP Service Pack 1 / Service...

Microsoft Windows HTML Help files parsing buffer overflow

Heap overflow on HTML help .chm files structure parsing...

Microsoft Windows HTML Help Remote Code Execution Vulnerability

Description Microsoft Windows HTML Help is affected by a remote code execution vulnerability. The vulnerability presents itself when the application handles malformed data through the InfoTech protocol ms-its, its, mk:@msitstore. An attacker may exploit this issue from a malicious Web page or...

MS05-026: Vulnerability in HTML Help Could Allow Remote Code Execution (896358)

The remote host contains a version of the HTML Help ActiveX control that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc...

Microsoft Windows help viewer vulnerable to heap overflow

Overview A vulnerability exists in the Microsoft Windows help viewer application that could allow a remote attacker to execute code of their choosing on a vulnerable system. Description The Microsoft Windows help viewer winhlp32.exe provides application assistance to users through a special type ...

Microsoft HTML Help vulnerable to integer overflow

Overview Microsoft HTML Help contains an integer overflow vulnerability, allowing a remote attacker to execute arbitrary code. Description HTML Help The Microsoft HTML Help system ". . . is the standard help system for the Windows platform." HTML Help components can be compiled to ". . . compress...

CVE-2005-1839

The CVE-2005-1839 entry documents multiple SQL injection vulnerabilities in Doug Luxem’s Liberum Help Desk 0.97.3. The flaws allow remote attackers to inject arbitrary SQL via the id parameter to three pages: view.asp, print.asp, and the edit parameter to register.asp. The NVD metrics show a CVSS...

CVE-2005-1839

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

CVE-2005-1838

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1838

The CVE-2005-1838 entry concerns Liberum Help Desk 0.97.3, where multiple cross-site scripting vulnerabilities exist in castnewPost.asp. The flaw permits remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields. The NVD entry lists a Medium s...

CVE-2005-1838

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1839

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

CVE-2005-1838: Undefined Security Weakness

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1839: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

CVE-2005-1674

CVE-2005-1674 : The provided documents describe a Cross-Site Request Forgery in Help Center Live (view.php) that allows a remote attacker to perform administrator actions via a link or IMG tag. The Red Hat, CVE, CVE List, Exploit-DB, and Nessus entries concur on the vulnerability class and affect...

CVE-2005-1672

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...