iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability

iDefense Security Advisory 05.11.10 http://labs.idefense.com/intelligence/vulnerabilities/ May 11, 2010 I. BACKGROUND Adobe Shockwave Player is a popular Web browser plugin. It is available for multiple Web browsers and platforms, including Windows, and MacOS. Shockwave Player enables Web browser...

DEBIAN-CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

CVE-2010-1723

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1723

Joomla! Component iNetLanka Contact Us Draw Root Map (com_drawroot) version 1.1 is affected by a Local File Inclusion (directory traversal) vulnerability. The issue arises from passing a .. sequence in the controller parameter to index.php, enabling remote attackers to read arbitrary server files...

CVE-2010-1723

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2009-4768

Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map. NOTE: some of these details are obtained from third party information...

CVE-2009-4768

CVE-2009-4768 affects Blizzard Warcraft III: The Frozen Throne (versions 1.24b and earlier). The vulnerability resides in the JASS script interpreter, enabling a crafted custom map to trigger arbitrary code execution by user-assisted remote attackers. This is described as an unspecified vulnerabi...

CVE-2009-4768

Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map. NOTE: some of these details are obtained from third party information...

KLA10389 ACE vulnerability in Warcraft III

An unspecified vulnerability was found in Warcraft III. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed map. Original advisories - Related products Warcraft-III:-The-Frozen-Throne CVE list...

Joomla Contact Us Draw Root Map 1.1 Local File Inclusion

============================================================================================================== o Joomla Component Contact Us Draw Root Map Local File Inclusion Vulnerability Software : comdrawroot version 1.1 Vendor : http://joomlacomponent.inetlanka.com/ Author : AntiSecurity NoG...

Joomla Multiple Map Local File Inclusion

============================================================================================================== o Joomla Component Multiple Map Local File Inclusion Vulnerability Software : commultimap version 1.0 Vendor : http://joomlacomponent.inetlanka.com/ Author : AntiSecurity NoGe Vrs-hCk...

Joomla Contact Us Google Map 1.2 Local File Inclusion

============================================================================================================ o Joomla Component Contact Us Google Map Local File Inclusion Vulnerability Software : comgoogle version 1.2 Vendor : http://joomlacomponent.inetlanka.com/ Author : AntiSecurity NoGe Vrs-h...

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion ============================================================================================================== o Joomla Component Contact Us Draw Root Map Local File Inclusion Vulnerability Software : comdrawroot...

Joomla Component com_google Local File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================================== Joomla Component comgoogle Local File Inclusion Vulnerability ==============================================================...

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion

============================================================================================================== o Joomla Component Contact Us Draw Root Map Local File Inclusion Vulnerability Software : comdrawroot version 1.1 Vendor : http://joomlacomponent.inetlanka.com/ Author : AntiSecurity NoG...

Joomla Manager 1.5.3 SQL Injection

----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site : http://MiXaTy.com Date : April, 15-2010 Locati...

Joomla iProperty 1.5.3 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Joomla! Component com_manager 1.5.3 - 'id' SQL Injection

----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site : http://MiXaTy.com Date : April, 15-2010 Locati...