Stack overflow

Stack-based buffer overflow in the HPSDDX Class SDD ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows remote attackers to execute arbitrary code via a long argument to the queryHub function...

CVE-2007-3554

Stack-based buffer overflow in the HPSDDX Class SDD ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows remote attackers to execute arbitrary code via a long argument to the queryHub function...

CVE-2007-3554

The CVE-2007-3554 entry describes a stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control (sdd.dll) used by HP Instant Support – Driver Check. A long argument to the queryHub function can allow remote code execution on affected hosts. The vulnerability affects the ActiveX control ...

Buffer overflow in HP Instant Support Driver Check (SDD) ActiveX control

John Heasman of NGSSoftware has discovered a high risk vulnerability in the HP Instant Support Driver Check SDD ActiveX control, which is marked safe for scripting. The vulnerability affects the following version of the SDD control: HP Instant Support Driver Check versions prior to 1.5.0.3 This...

HP Instant Support (Driver Check) Remote Buffer Overflow Exploit PoC

No description provided by source. ---------------------------------------------------------------------------------- HP Instant Support - Driver Check Remote Buffer Overflow Exploit author: Carlo Di Dato aka shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on...

HP Instant Support Driver Check HPSDDX Class (SDD) ActiveX (sdd.dll) queryHub Function Overflow

The remote host contains the SDD ActiveX control, a part of HP Instant Support. The version of this control on the remote host is reportedly affected by a buffer overflow that can be triggered by a long argument to its 'queryHub' method. If an attacker can trick a user on the affected host into...

[SECURITY] Fedora 7 Update: ekg-1.7-1.fc7

EKG "Eksperymentalny Klient Gadu-Gadu" is an open source gadu-gadu client for UNIX systems. Gadu-Gadu is an instant messaging program, very popular in Poland. EKG features include: - irssi-like ncurses interface - sending and receiving files - voice conversations - launching shell commands on...

HP Instant Support - Driver Check Remote Buffer Overflow (PoC)

---------------------------------------------------------------------------------- HP Instant Support - Driver Check Remote Buffer Overflow Exploit author: Carlo Di Dato aka shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 full patch...

HP Instant Support (Driver Check) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ==================================================================== HP Instant Support Driver Check Remote Buffer Overflow Exploit PoC ====================================================================...

hpinstat-overflow.txt

---------------------------------------------------------------------------------- HP Instant Support - Driver Check Remote Buffer Overflow Exploit author: Carlo Di Dato aka shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 full patch...

HP Instant Support - Driver Check Remote Buffer Overflow (PoC)

HP Instant Support - Driver Check Remote Buffer Overflow PoC ---------------------------------------------------------------------------------- HP Instant Support - Driver Check Remote Buffer Overflow Exploit author: Carlo Di Dato aka shinnai mail: shinnaiatautisticidotorg site:...

Code injection

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application crash via a malformed header value in a SIP INVITE message, a different vulnerability than CVE-2007-3350...

CVE-2007-3437

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application crash via a malformed header value in a SIP INVITE message, a different vulnerability than CVE-2007-3350...

CVE-2007-3437

CVE-2007-3437 affects AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP. It is a remote denial of service vulnerability triggered by a malformed SIP INVITE header value, causing the AIM application to crash. The vulnerability is described as distinct from CVE-2007-3350 (a separate SIP INVITE flo...

CVE-2007-3437

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application crash via a malformed header value in a SIP INVITE message, a different vulnerability than CVE-2007-3350...

CVE-2007-3424

The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact and remote attack vectors...

Design/Logic Flaw

cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the beginning of the .dat file name when the 1 imview2 or 2 imview3 function reads a an internal IM, or a message from a b guest or c removed member, which has unknown impact and...

CVE-2007-3423

cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the beginning of the .dat file name when the 1 imview2 or 2 imview3 function reads a an internal IM, or a message from a b guest or c removed member, which has unknown impact and...

Design/Logic Flaw

The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact and remote attack vectors...

CVE-2007-3423

cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the beginning of the .dat file name when the 1 imview2 or 2 imview3 function reads a an internal IM, or a message from a b guest or c removed member, which has unknown impact and...