Icona SpA C6 Messenger - DownloaderActiveX Control Arbitrary File Download and Execute (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Icona SpA C6...

Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute

This module exploits a vulnerability in Icona SpA C6 Messenger 1.0.0.1. The vulnerability is in the DownloaderActiveX Control DownloaderActiveX.ocx. The insecure control can be abused to download and execute arbitrary files in the context of the currently logged-on user. This module requires...

米聊 for Android 信息泄露漏洞

CVE-2011-4697 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android 的Xiaomi MiTalk Messenger com.xiaomi.channel应用程序2.1.320之前的版本中存在漏洞，该漏洞源于未能正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改通讯信息 0 米聊 1.0 米聊 2.1.280 米聊 2.1.310 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

Mibew Messenger 1.6.4 Cross Site Scripting

Advisory ID: CSA-12001 Title: Mibew messenger multiple XSS Product: mibew messenger Version: 1.6.4 and probably prior Vendor: mibew.org Vulnerability type: XSS Vendor notification: 2012-01-07 Public disclosure: 2012-01-24 Mibew messenger version 1.6.4 an probably below is vulnerable to multiple X...

CVE-2011-4697

The Xiaomi MiTalk Messenger com.xiaomi.channel application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application...

Design/Logic Flaw

The Xiaomi MiTalk Messenger com.xiaomi.channel application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application...

CVE-2011-4697

The Xiaomi MiTalk Messenger Android app (com.xiaomi.channel) is affected by CVE-2011-4697 in versions before 2.1.320 due to insufficient data protection, allowing a remote attacker using a crafted app to read or modify messaging information. A vendor patch is available; users should upgrade to th...

CVE-2011-4697

The Xiaomi MiTalk Messenger com.xiaomi.channel application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application...

Yahoo Messenger JPG Photo Sharing Integer Overflow Vulnerability

Yahoo! Messenger is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Yahoo Messenger JPG Photo Sharing Integer Overflow Vulnerability

This host is installed with Yahoo! Messenger and is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbyahoomsgcyimagebofvuln.nasl 6018 2017-04-24 09:02:24Z teissa $ Yahoo Messenger JPG Photo Sharing Integer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright ...

Integer overflow

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow...

CVE-2012-0268

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow...

CVE-2012-0268

CVE-2012-0268 describes an integer overflow in Yahoo! Messenger’s YImage.dll CYImage::LoadJPG when photo sharing is enabled, leading to a heap-based buffer overflow that could allow remote code execution via a crafted JPG. Affected are Yahoo! Messenger versions up to and including 11.5.0.155 (old...

CVE-2012-0268

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow...

Yahoo Messenger ".jpg"文件处理缓冲区溢出漏洞

BUGTRAQ ID: 51405 CVE ID: CVE-2012-0268 Yahoo! Messenger是一款流行的即时通信软件。 Yahoo! Messenger在实现上存在安全漏洞，可被恶意用户利用控制用户系统。 此漏洞源于在分配使用图形尺寸值的内存时，"CYImage::LoadJPG"方法YImage.dll中存在整数溢出漏洞，可通过特制的JPG文件造成堆缓冲区溢出。 0 Yahoo! Messenger 11.x 厂商补丁： Yahoo! ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://messenger.yahoo.co...

EFF Warns Users About Privacy Issues With New AIM Chat Client

Privacy experts at the EFF are warning users not to upgrade to the new version of the venerable AOL Instant Messenger chat client because of some serious privacy concerns with the application. The main concern is that the new version of AIM automatically logs all user conversations by default, bu...

Mandriva Update for libmsn MDVA-2011:081-1 (libmsn)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-3179

The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command...

Command injection

The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command...

CVE-2011-3179

CVE-2011-3179 affects Novell Messenger Server (formerly GroupWise Messenger): versions 2.1 and 2.2.x prior to 2.2.1, and GroupWise Messenger 2.04 and earlier, are vulnerable to an information-disclosure flaw that allows a remote attacker to read arbitrary memory locations via a crafted command. T...