Microsoft Excel RealTimeData Record Heap Corruption (MS10-038; CVE-2010-1247)

Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available is several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...

Information disclosure

admin/saveuser.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which allows remote attackers to read or modify the administrator's credentials via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2009-4806

CVE-2009-4806 affects Digital Interchange Document Library 1.0.1; the admin/save_user.asp endpoint does not require administrative authentication, allowing remote attackers to read or modify the administrator credentials via unspecified vectors. This yields partial confidentiality and integrity i...

Interchange HTTP Response Splitting Vulnerability

Binary data 5488.prm...

Interchange HTTP Response Splitting Vulnerability

Interchange is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust. Interchange versions...

Interchange HTTP Response Splitting Vulnerability

Interchange is prone to an HTTP response-splitting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Interchange Detection

This host is running Interchange, an open source ecommerce system and application server/component application, written in the Perl programming language. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Interchange Detection

This host is running Interchange, an open source ecommerce system and application server/component application, written in the Perl programming language. OpenVAS Vulnerability Test $Id: gbinterchangewebdetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Interchange Detection Authors: Michael Meyer...

Microsoft Excel File Named Graph Record Parsing Stack Overflow (MS07-023; CVE-2007-0215)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

RealPlayer: GIF file heap overflow

Heap-based buffer overflow in the CGIFCodec::GetPacketBuffer function in datatype/image/gif/common/gifcodec.cpp in RealNetworks RealPlayer 10; RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741; RealPlayer 11 11.0.0 through 11.0.4; RealPlayer Enterprise; Mac RealPlayer 10, 10.1, and 11.0; Linux...

OpenJDK: PNG and GIF processing buffer overflow vulnerabilities (6804996, 6804997)

Multiple buffer overflows in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via 1 a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen,...

OpenJDK GIF processing buffer overflow vulnerability (6804998)

Buffer overflow in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.219 and earlier; and 1.3.124 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998...

Interchange < 5.4.4 / 5.6.2 / 5.7.2 Search Request Information Disclosure

The remote host appears to be running Interchange, an open source application server that handles state management, authentication, session maintenance, click trails, filtering, URL encodings, and security policy. According to the banner in its administrative login page, the installed version of...

CVE-2008-6945

Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...

CVE-2008-6945

Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...

CVE-2008-6945

Multiple cross-site scripting XSS vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via 1 the mvorderitem CGI variable parameter in Core, 2 the country-select widget, or 3 possibly the value...

CVE-2008-6945

CVE-2008-6945 affects Interchange: vulnerable in versions 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3. The issue is described as multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via (1) the mv_order_item CGI variable para...

DEBIAN-CVE-2009-2660

Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to 1 crafted GIF files gifread.c and 2 crafted JPEG files jpegread.c, a different...

giflib/libunfig: memory corruption via a crafted GIF

libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write...