[SECURITY] Fedora 7 Update: pidgin-2.2.1-1.fc7

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Core Security Technologies Advisory 2007.0817

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Remote command execution, HTML and JavaScript injection vulnerabilities in AOL’s Instant Messaging software Advisory Information Title: Remote Command execution, HTML...

WireShark MMS Remote Denial of Service vulnerability

Title ===== WireShark MMS Remote Denial of Service vulnerability Date ==== 13 August 2007 Affected Software ================= WireShark 0.99.6 Maybe all version of Ethereal Overview ======== MMS message parse flaw in WireShark implementation may allow a remote attacker to crash it causing denial ...

Microsoft Excel Worksheet Index Value Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file .xls. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Internet Explorer Vector Markup Language VGX.DLL Remote Buffer Overflow Vulnerability

Description Microsoft Internet Explorer is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. This issue occurs when rendering VML Vector Markup Language graphics. Attackers can leverage this issue to execute arbitrary code in the...

Microsoft XML Core Services SubstringData Integer Overflow Vulnerability

Description Microsoft XML Core Services is prone to an integer-overflow vulnerability because the application fails to ensure that integer values are not overrun. Attackers can exploit this issue by enticing unsuspecting users to view malicious web content. Specially crafted scripts could issue...

Microsoft OLE Automation SubstringData Function Integer Overflow Vulnerability

Description Microsoft OLE Automation is prone to an integer-overflow vulnerability. this issue occurs because the application fails to ensure that integer values are not overrun. Successfully exploiting this issue allows remote attackers to corrupt heap memory and execute arbitrary in the context...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...

CVE-2007-4079

CVE-2007-4079 describes multiple XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise. The flaws allow remote attackers to inject arbitrary web script or HTML via the domain or q parameter to admin/membersearch.php, or the userid parameter to admin/edituser.php. The NVD entry lists a M...

CVE-2007-4079

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...

CVE-2007-4079: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...

Ipswitch IM Server < 2.07 Multiple Function Remote DoS

Ipswitch Instant Messaging Server, a secure, instant messaging product targeted at businesses, is installed on the remote Windows host. The version of Instant Messaging Server on the remote host reportedly allows an unauthenticated attacker to overwrite a destructor and crash the application when...

Ipswitch Instant Messaging畸形消息远程拒绝服务漏洞

BUGTRAQ ID: 25031 Ipswitch Instant Messaging是Ipswitch协作组件中所捆绑的即时消息软件。 Ipswitch IM在处理畸形的消息时存在漏洞，远程攻击者可能利用此漏洞导致服务崩溃。 如果攻击者在5179端口上创建了到IM Server服务的TCP会话，就可以通过发送畸形消息导致服务守护程序崩溃，崩溃的服务无法自动重启。可通过以下函数到达有漏洞的代码： DoAttachVideoSender DoAttachVideoReceiver DoAttachAudioSender DoAttachAudioReceiver Ipswitch...

Ipswitch Instant Messaging Server Detection

The remote service is an Ipswitch IM Server, the server portion of Ipswitch Instant Messaging, a secure, instant messaging product targeted at businesses and running on Windows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

Ipswitch Instant Messaging Client Detection

The remote service is an Ipswitch IM Client, the client portion of Ipswitch Instant Messaging, a secure, instant messaging product targeted at businesses and running on Windows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

CVE-2007-3959

The IM Server aka IMserve or IMserver 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite ICS allows remote attackers to cause a denial of service daemon crash via certain data to TCP port 5179 that overwrites a destructor, as reachable by the 1...

Design/Logic Flaw

The IM Server aka IMserve or IMserver 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite ICS allows remote attackers to cause a denial of service daemon crash via certain data to TCP port 5179 that overwrites a destructor, as reachable by the 1...

Ipswitch Instant Messaging Server DoS

Crash on parsing TCP/5179 traffic...

iDefense Security Advisory 07.23.07: Ipswitch Instant Messaging Server Denial of Service Vulnerability

Ipswitch Instant Messaging Server Denial of Service Vulnerability iDefense Security Advisory 07.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 23, 2007 I. BACKGROUND Ipswitch Instant Messaging is the instant messaging software that is included with Ipswitch Collaboration Suite...

Alstrasoft Sms Text Messaging Enterprise 2.0 - adminmembersearch.php Multiple Cross-Site Scripting Vulnerabilities

Alstrasoft Sms Text Messaging Enterprise 2.0 - adminmembersearch.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25022/info SMS Text Messaging Enterprise is prone to multiple cross-site scripting vulnerabilities because the application fails to properly...