Microsoft IIS 3.0/4.0 Double Byte Code Page Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/477/info This vulnerability could allow a web site viewer to obtain the source code for .asp and similar files if the server's default language Input Locale is set to Chinese, Japanese or Korean. How this works is as...

The browser cache is Vary broken

Jake, why are your blog posts always so depressing? -- Domenic Denicola @domenic Well, I wouldn't want to disappoint… TL;DR If you use "Vary" to negotiate content, the responses will fight for the same cache space. Additionally, IE ignores "max-age" and Safari is buggy. Content negotiation using...

ECShop shop system the latest versions contain vulnerabilities-vulnerability warning-the black bar safety net

This hole, actually I on 2 0 1 2 year 1 month of time to see ecshop on the analysis, originally due to feeling tasteless you didn't put out. Just under the official website latest version, didn't think also exist. Vulnerability file:/demo/index.php | 1 | if ! empty$POST'lang' //if not empty ---|-...

Microsoft IE语言包安装远程代码执行漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 用于负责按需安装Internet Explorer语言包的例程存在竞争条件错误，成功利用此漏洞的攻击者可以完全控制受影响的系统。 如果网页所包含的一些内容是由所安装语言包不支持的语言编写的话，则用户访问了该网页就可以触发这个漏洞，导致内存破坏。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6...

Race condition

Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability."...

CVE-2007-3027

CVE-2007-3027 is a remote code execution issue in Microsoft Internet Explorer (5.01, 6, 7) caused by a race condition during language pack installation, which can trigger memory corruption when a page forces installation of multiple language packs. The vulnerability could allow an attacker to run...

CVE-2007-3027

Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to install multiple language packs in a way that triggers memory corruption, aka "Language Pack Installation Vulnerability."...

Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in routines responsible for the on-demand...

Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to remote code-execution vulnerability because of a race-condition in its language-pack installation support. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application...

CVE-2005-2014

The vulnerability CVE-2005-2014 affects the web-based FAQ system paFAQ 1.0 Beta 4 . The issue lies in the "upload a language pack" feature, which allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack. The CVE entry notes a MEDIUM sever...

CVE-2005-2014

The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack...

CVE-2005-2014

The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack...

Microsoft Dynamics CRM 2015 Language Pack Update 1

Microsoft Dynamics CRM 2015 Language Pack Update 1...

Microsoft .NET Framework 2.0 Language Pack: ia64 (KB829019)

Microsoft .NET Framework 2.0 Language Pack: ia64 KB829019...

Microsoft .NET Framework 2.0 Service Pack 1 (KB110806) x86 Language Pack

Microsoft .NET Framework 2.0 Service Pack 1 KB110806 x86 Language Pack...

Microsoft .NET Framework 2.0 Service Pack 1 (KB110806) ia64 Language Pack

Microsoft .NET Framework 2.0 Service Pack 1 KB110806 ia64 Language Pack...

Microsoft .NET Framework 2.0 Language Pack: x64 (KB829019)

Microsoft .NET Framework 2.0 Language Pack: x64 KB829019...

Microsoft .NET Framework 3.0: x86 Language Pack (KB928416)

Microsoft .NET Framework 3.0: x86 Language Pack KB928416...

Microsoft .NET Framework 2.0 Language Pack: x86 (KB829019)

Microsoft .NET Framework 2.0 Language Pack: x86 KB829019...

Forefront Identity Manager 2010 Add-ins and Extensions Language Pack Update (KB978864)

Forefront Identity Manager 2010 Add-ins and Extensions Language Pack Update KB978864...