PT-2010-5506

Name of the Vulnerable Software and Affected Versions CA Internet Security Suite Plus 2010 version 6.2.0.22 Description The issue is caused by an integer overflow in the KmxSbx.sys driver, which allows local users to execute arbitrary code or cause a denial of service through pool corruption. Thi...

DEBIAN-CVE-2010-4096

share/ma/keysforuser in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command...

CVE-2010-4096

share/ma/keysforuser in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command...

CVE-2010-4096

share/ma/keysforuser in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command...

CVE-2010-4096

Monkeysphere 0.31 and 0.32 are affected. The vulnerability in share/ma/keys_for_user allows local users to execute arbitrary code due to manipulations related to the monkeysphere-authentication keys-for-user command. The exact root cause, affected components/versions beyond 0.31–0.32, and concret...

CVE-2010-4096: Improper Control of Generation of Code

share/ma/keysforuser in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command...

Comet Player DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================== Comet Player DLL Hijacking Exploit ================================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

McAfee LinuxShield <= 1.5.1 Local/Remote Root Code Execution

Exploit for linux platform in category remote exploits ============================================================ McAfee LinuxShield WARNING: This Exploit deletes the default Update Server Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this...

Design/Logic Flaw

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType...

PT-2010-2245 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the Windows kernel-mode drivers not properly validating changes in certain kernel objects, allowing local users to execute arbitrary code. This could...

CVE-2010-0484: Improper Input Validation

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to...

CVE-2010-0819: Improper Input Validation

Unspecified vulnerability in the Windows OpenType Compact Font Format CFF driver in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation...

Apple Safari 4.0.5 parent.close() (memory corruption) Code Execution

Exploit for windows platform in category remote exploits ==================================================================== Apple Safari 4.0.5 parent.close memory corruption Code Execution ==================================================================== Tested on: Apple Safari 4.0.5 / XP SP...

Mandriva Security Advisory MDVSA-2009:059-1 (xchat)

The remote host is missing an update to xchat announced via advisory MDVSA-2009:059-1. OpenVAS Vulnerability Test $Id: mdksa20090591.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:059-1 xchat Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CVE-2009-3861

The CVE-2009-3861 entry describes a stack-based buffer overflow in SafeNet SoftRemote (Security Policy Editor) affecting versions up to 10.8.5/10.3.5 and possibly others before 10.8.9. The overflow is triggered by overly long strings in a security policy file’s TREENAME or GROUPNAME fields (spd),...

PT-2009-6086 · Safenet · Safenet Softremote

Name of the Vulnerable Software and Affected Versions: SafeNet SoftRemote versions 10.3.5 through 10.8.5 Description: A stack-based buffer overflow issue allows local users to execute arbitrary code via a long string in a 1 TREENAME or 2 GROUPNAME Policy file spd. Recommendations: For versions...

cyrus-imapd: buffer overflow in cyrus sieve

Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...

DEBIAN-CVE-2009-2632

Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...

CVE-2008-6962

Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer...

CVE-2008-6962

CVE-2008-6962 affects Avira AntiVir products (Premium/ Premium Security Suite/ Professional/ Personal - FREE). The issue stems from a crafted IOCTL request that overwrites a kernel pointer, enabling local code execution. NVD lists CVSSv2 base score 7.2 (HIGH) with LOCAL attack, low complexity, no...