CVE-2009-3287: Improper Input Validation

lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to spoof the IP address and hide activities via a modified X-Forwarded-For header...

CVE-2009-3221

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

Stack overflow

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

CVE-2009-3221

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

CVE-2009-3221

The CVE-2009-3221 entry concerns a stack-based buffer overflow in Audio Lib Player (ALP) . The vulnerability is triggered by a long URL inside a .m3u playlist file , allowing a remote attacker to execute arbitrary code on affected systems. The root cause is a stack-based overflow in ALP when proc...

CVE-2009-3221: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Audio Lib Player ALP allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file...

Audio Lib Player (m3u File) Buffer Overflow Exploit (SEH)

No description provided by source. Audio Lib Player m3u SEH overwrite product: http://www.toocharger.com/telecharger/logiciels/audio-lib-player/19056.htm Usage: Create playlist, load exploit.m3u and connect to shell on port 4444 $ nc 192.168.1.131 4444 Microsoft Windows XP Version 5.1.2600 C...

Audio Lib Player Buffer Overflow

Audio Lib Player m3u SEH overwrite product: http://www.toocharger.com/telecharger/logiciels/audio-lib-player/19056.htm Usage: Create playlist, load exploit.m3u and connect to shell on port 4444 $ nc 192.168.1.131 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp...

CVE-2009-3163: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to 1...

SuSE Security Summary SUSE-SR:2009:014

The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Audio Lib Player (m3u File) Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ========================================================= Audio Lib Player m3u File Buffer Overflow Exploit SEH ========================================================= Audio Lib Player m3u SEH overwrite product:...

Audio Lib Player - .m3u Local Buffer Overflow (SEH)

Audio Lib Player - .m3u Local Buffer Overflow SEH Audio Lib Player m3u SEH overwrite product: http://www.toocharger.com/telecharger/logiciels/audio-lib-player/19056.htm Usage: Create playlist, load exploit.m3u and connect to shell on port 4444 $ nc 192.168.1.131 4444 Microsoft Windows XP Version...

Fedora Core 10 FEDORA-2009-8802 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8802. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8800 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8800 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-8800. OpenVAS Vulnerability Test $Id: fcore20098800.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8800 qt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-7073: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

Fedora 11 : qt-4.5.2-2.fc11 (2009-8800)

Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...

Fedora 10 : qt-4.5.2-2.fc10 (2009-8802)

Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...

Fedora Core 11 FEDORA-2009-6972 (poppler)

The remote host is missing an update to poppler announced via advisory FEDORA-2009-6972. OpenVAS Vulnerability Test $Id: fcore20096972.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6972 poppler Authors: Thomas Reinke Copyright: Copyright c 2009...

[Full-disclosure] [DZC-2009-001] The Movie Player and VLC Media Player Real Data Transport parsing integer underflow.

Advisory: The Movie Player and VLC Media Player Real Data Transport parsing integer underflow. Affected products: The Movie player svn r29438 1 VLC media player = 1.0.0 2 Possible others applications that use the xine lib code 3. Discovred by: tixxDZ tixxdz at gmail dot com DZCORE Labs, Algeria...