CVE-2006-4474

CVE-2006-4474 affects Joomla! prior to 1.0.11, enabling remote XSS via unspecified parameters in Admin Module Manager, Admin Help, and Search. The underlying issue is cross-site scripting that allows injection of arbitrary script/HTML. The entry notes the vulnerability in Joomla! before 1.0.11 an...

CVE-2006-4474

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in 1 Admin Module Manager, 2 Admin Help, and 3 Search...

CVE-2006-4138

Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer winhlp32.exe allow user-assisted attackers to execute arbitrary code via crafted HLP files...

CVE-2006-4138

Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer winhlp32.exe allow user-assisted attackers to execute arbitrary code via crafted HLP files...

CVE-2006-4138

CVE-2006-4138 affects the Microsoft Windows Help File viewer (winhlp32.exe). It involves multiple unspecified vulnerabilities that could allow user-assisted attackers to execute arbitrary code via crafted HLP files. The NVD entry lists a high impact with a base CVSS v2 score of 7.6 (AV:N/AC:H/Au:...

Microsoft Windows XP20002003 help - Multiple Vulnerabilities

Microsoft Windows XP20002003 help - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/19490/info The Microsoft Windows Help File viewer winhlp32.exe is prone to multiple remote vulnerabilities. These vulnerabilities present themselves when the application handles specially crafte...

Microsoft Windows XP/2000/2003 help - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/19490/info The Microsoft Windows Help File viewer winhlp32.exe is prone to multiple remote vulnerabilities. These vulnerabilities present themselves when the application handles specially crafted Windows Help .hlp files. A successful attack may let the...

Internet Explorer HTML Help ActiveX buffer overflow

Buffer overflow on oversized 'Image' property. Vulnerability can be used for hidden trojan installation...

Microsoft Security Bulletin MS06-046 Vulnerability in HTML Help Could Allow Remote Code Execution (922616)

Microsoft Security Bulletin MS06-046 Vulnerability in HTML Help Could Allow Remote Code Execution 922616 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critic...

MS06-046: Vulnerability in HTML Help Could Allow Remote Code Execution (922616)

The remote host contains a version of the HTML Help ActiveX control that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web page. C Tenable Network Security, Inc. include"compat.inc"; if description...

Help Center Live <= 2.1.2 Directory Traversal

Binary data 3696.prm...

Help Center Live 2.1.2 - module.php Directory Traversal

Help Center Live 2.1.2 - module.php Directory Traversal source: https://www.securityfocus.com/bid/19256/info Help Center Live is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files...

Help Center Live 2.1.2 - 'module.php' Directory Traversal

source: https://www.securityfocus.com/bid/19256/info Help Center Live is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files from the vulnerable system in the context of the affected...

Cisco VPN client for Windows privilege escalation

Privilege escalation with help subsystem...

Microsoft Internet Explorer vulnerable to heap overflow via the HTML Help Control "Image" property

Overview The HTML Help ActiveX control contains a heap overflow vulnerability. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description ActiveXActiveX is a technology that allows programmers to create reusable software components that can be...

CVE-2006-3357

Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...

CVE-2006-3357

Heap-based buffer overflow in HTML Help ActiveX control hhctrl.ocx in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values,...

CVE-2006-3357

CVE-2006-3357 describes a heap overflow in the HTML Help ActiveX control (hhctrl.ocx) used by Internet Explorer 6. The vulnerability occurs when repeatedly setting the Image property of Internet.HHCtrl.1, which can lead to remote code execution or an application crash. Public advisories attribute...

FreeBSD : horde -- various problems in dereferrer (e94cb43d-0c4a-11db-9016-0050bf27ba24)

Horde 3.1.2 release announcement : Security Fixes : - Closed XSS problems in dereferrer IE only, help viewer and problem reporting screen. - Removed unused image proxy code from dereferrer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[Full-disclosure] Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0011 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ Horde 3.1.1, 3.0.10 Multiple Security Issues +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON July 05, 2006 PUBLISHED AT...