7652 matches found
DEBIAN-CVE-2007-2948
Multiple stack-based buffer overflows in stream/streamcddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long 1 album title or 2 category...
DRDoS - Distributed Reflection Denial of Service
DRDoS - Distributed Reflection Denial of Service !/usr/bin/perl written by whoppix c 2007 This Piece of software may be freely re-distributed under the Terms of the LGPL. for a short usage type ./script --help this program requires: perl, Net::RawIP depends on libpcap, Getopt::Long which should b...
DRDoS - Distributed Reflection Denial of Service
Exploit for multiple platform in category dos / poc ================================================ DRDoS - Distributed Reflection Denial of Service ================================================ !/usr/bin/perl written by whoppix c 2007 This Piece of software may be freely re-distributed under...
DEBIAN-CVE-2007-2452
Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...
Code injection
The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools MSVDT Database Designer 7.0 allows remote attackers to cause a denial of service Internet Explorer 6 crash via a long argument...
CVE-2007-2884
Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service CPU consumption or execute arbitrary code via a Visual Basic Project vbp file with a long 1 Description or 2 Company Name VersionCompanyName field...
Stack overflow
Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via a long filename in a .cue file...
CVE-2007-2703
BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access privileged resources...
CVE-2007-2703
BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access privileged resources...
SOL3126 - Large TCP window sizes may make it easier to predict sequence numbers vulnerability CVE-2004-0230
This vulnerability is found in the principle design of TCP/IP itself and cannot be completely corrected without changing to an alternate protocol. The central issue in this vulnerability is that for long-lived connections, as measured in hours or days, an outside attacker could send a flurry of R...
Buffer overflow
Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involving the processconnectionrequest function in webdesproxy.c...
CVE-2007-2668
Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involving the processconnectionrequest function in webdesproxy.c...
yEnc32 Decoder超长文件名堆缓冲区溢出漏洞
yEnc32是一款简单易用的GUI y编码器/y解码器。 yEnc32不正确处理文件名数据,远程攻击者可以利用漏洞进行堆溢出攻击,可能以应用程序权限执行任意指令。 当解码包含超长文件名的yEnc编码的文件时,可导致破坏堆缓冲区,精心构建提交数据可能以应用程序权限执行任意指令。 yEnc32 1.0.7.207 升级程序: yEnc32 yEnc32 1.0.7.207 yEnc32 yenc32-108.exe http://superb-east.dl.sourceforge.net/sourceforge/yenc32/yenc32-108.exe...
CVE-2007-2505
Stack-based buffer overflow in InterVations MailCOPA 8.01 20070323 allows user-assisted remote attackers to execute arbitrary code via a long command line argument, as demonstrated by a long string in the subject field in a mailto URI. NOTE: some of these details are obtained from third party...
PT-2007-3811 · Atomix Productions · Atomixmp3
Name of the Vulnerable Software and Affected Versions: AtomixMP3 affected versions not specified Description: A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a long filename in an MP3 file. Recommendations: At the moment, there is no information...
security flaw
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long...
Code injection
Pi3Web Web Server 2.0.3 PL1 allows remote attackers to cause a denial of service application exit via a long URI. NOTE: this issue was originally reported as a crash, but the vendor states that the impact is a "clean" exit in which "the server I/O loop finishes and the process exits normally."...
CVE-2007-2367
Buffer overflow in wserveconsole.exe in Wserve HTTP Server whttp 4.6 allows remote attackers to cause a denial of service forced application exit via a long directory name in the URI...
Buffer overflow
Buffer overflow in wserveconsole.exe in Wserve HTTP Server whttp 4.6 allows remote attackers to cause a denial of service forced application exit via a long directory name in the URI...