1918 matches found
[Full-disclosure] SimpleCDR-X - Insecure tempfile handling
SimpleCDR-X - Insecure tempfile handling +----------------------------------------+ Date: 2005-09-15 URL: http://ogre.rocky-road.net/cdr.shtml Vendor Notified: Days ago, no answer. Version: 1.3.3 latest - Description - Files beeing recorded can be read by any user on the system due to insecure...
Mercora IMRadio Detection
Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. Josh Zlatin-Amishav GPLv2 include"compat.inc"; if description...
Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure
Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerab...
[Full-disclosure] Rediff Bol 7.0 WAB Contacts
Rediff Bol 7.0 WAB Contacts Affected Program : Rediff Bol 7.0 It is a popular instant messenger from Rediff.com Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability Description : Rediff Bol's ActiveX control Fetch.FetchContact.1 / Fetch.dll allows a...
Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure
source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerable user's Windows Address Book. script var Obj = new...
IndiaTimes Instant Messenger ActiveX RenameGroup Function Overflow
Binary data 3199.prm...
CVE-2004-2373
Technical details beyond the public description are not provided in the supplied documents; monitor for updates for potential details on affected products, versions, root cause, and remediation.
CVE-2004-2373
The Buddy icon file for AOL Instant Messenger AIM 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations...
Multiple MindAlign instant messenger vulnerabilities
Information leak, authentication bypass, crossite scripting, weak encryption, DoS...
Critical: Red Hat Security Advisory: gaim security update
An updated gaim package that fixes a buffer overflow security issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Instant Messaging client. A heap based buffer overflow issue was discovered in the way Gai...
Gaim instant messenger buffer overflow
Buffer overflow on away message displaying...
Trillian instant messenger cleartext passwords leak
Yahoo Mail passwords are stored in common place with in cleartext...
Debian DSA-767-1 : ekg - integer overflows
Marcin Slusarz discovered two integer overflow vulnerabilities in libgadu, a library provided and used by ekg, a console Gadu Gadu client, an instant messaging program, that could lead to the execution of arbitrary code. The library is also used by other packages such as kopete, which should be...
[ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library
Gentoo Linux Security Advisory GLSA 200507-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 760-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...
Debian DSA-760-1 : ekg - several vulnerabilities
Several vulnerabilities have been discovered in ekg, a console Gadu Gadu client, an instant messaging program. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-1850 Marcin Owsiany and Wojtek Kaniewski discovered insecure temporary file creatio...
DSA-760-1 ekg - several
Bulletin has no description...
[Full-disclosure] [ZH2005-16SA] Insecure temporary file creation in Skype for Linux
ZH2005-16SA Insecure temporary file creation in Skype for Linux Application: Skype for Linux Version affected: = 1.1.0.20 Vendor website : http://www.skype.com Author: Giovanni Delvecchio e-mail: [email protected] About Skype ======== Skype is a free program that uses the latest P2P technolog...
Debian DSA-734-1 : gaim - denial of service
Two denial of service problems have been discovered in Gaim, a multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1269 A malformed Yahoo filename can result in a crash of the application. - CAN-2005-1934 A...