15460 matches found
Microsoft Windows XP .Manifest Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3942/info To enable desktop skinning, Microsoft Windows XP uses '.manifest' files 'filename.exe.manifest'. This file contains XML code that tells Windows XP to use the XP controls. Due to a flaw, Windows XP fails to...
Ecometry SGDynamo 5.32/6.1/7.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4720/info SGDynamo is a web application engine for Microsoft Windows operating systems. Script code is not filtered from URL parameters that are used as output by the SGDynamo program. This may enable an attacker to injec...
MDaemon WorldClient 5.0.x Folder Creation Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4689/info MDaemon is an integrated mail transport agent, webmail, and mail anti-virus package. It is available for Microsoft Windows operating systems. It may be possible for a remote user to take advantage of a buffer...
MyWebServer 1.0.2 Long HTTP Request HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5470/info MyWebServer is an application and web server for Microsoft Windows operating systems. If an oversized HTTP request is received by MyWebServer, some content provided as a URL is included in the page generated. An...
Microsoft Windows Media Player 9/10/11 WAV File Parsing Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33042/info Microsoft Windows Media Player is prone to a code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious file with the vulnerable application. A...
Microsoft Windows 95/98 IE5/Telnet Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/586/info Windows 95 and 98 systems running IE4 or specific versions of IE5 5.00.2314.1003 and 5.00.2314.1003IC are susceptible to a remote vulnerability that allows the execution of arbitrary code on a target that views a...
Microsoft Windows NT 4.0 PhoneBook Server Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/2048/info The Phone Book Service is an optional component that ships with the NT 4 Option Pack and Windows 2000. It is not installed by default. A buffer overflow vulnerability was discovered in the URL processing routine...
Skype 3.6.216 Voicemail URI Handler Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26588/info Skype is prone to a remote denial-of-service vulnerability because of a NULL-pointer dereference flaw. Successfully exploiting this issue allows remote attackers to crash the application, denying service to...
Microsoft Windows Media Player 7 Embedded OCX Control Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1714/info Due to a flaw in the method Microsoft Windows Media Player 7 handles OCX controls ActiveX containers in embedded in RTF email messages, it is possible to crash RTF-enabled email clients such as Microsoft Outlook...
HP OpenView OmniBack II Command Execution
No description provided by source. $Id: openviewomnibackexec.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1651/info The Still Image Service in windows 2000 is vulnerable to an unchecked buffer which could enable a user to run commands at the privilege level of the service LocalSystem by default. This is due to an unchecked...
Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1683/info By default, the telnet client telnet.exe shipped with Microsoft Windows 2000 utilizes Windows NT Challenge/Response NTLM as an authentication method. When establishing a connection to a host, the telnet client...
Microsoft Windows 2000/NT 4 Local Descriptor Table Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10122/info Microsoft Windows Local Descriptor Table programming interface is prone to a privilege-escalation vulnerability. A local attacker may be able to create a malicious entry in the Local Descriptor Table. This entr...
Microsoft Windows 95/98/2000/NT4 WinHlp Item Buffer Overflow Vulnerability
... HTML帮助ActiveX控件Hhctrl.ocx由Microsoft HTML Help附带，设计用于与Internet Explorer一起提供帮助功能。 ... HTML帮助ActiveX控件存在漏洞，可导致远程攻击者进行拒绝服务攻击。 ... HTML帮助ActiveX控件存在基于栈和堆的缓冲区溢出，攻击者可以构建包含恶意数据的Web页面，当用户浏览此链接时，可导致拒绝服务攻击，精心构建提交数据可导致以SYSTEM的权限在客户端系统上执行任意命令。...
HP OpenView Network Node Manager 7.x - 'ovspmd' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28689/info HP OpenView Network Node Manager is prone to a buffer-overflow vulnerability. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the Network Node Manager...
Opera Web Browser 7.23 Empty Embedded Object JavaScript Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be susceptible to a JavaScript denial of servic...
Hosting Controller 1.x DSNManager Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4759/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The DSNManager script does not sufficiently filter...
Microsoft Windows Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16167/info Microsoft Windows WMF graphics-rendering engine is affected by multiple memory-corruption vulnerabilities. These issues affect the 'ExtCreateRegion' and 'ExtEscape' functions. These problems present themselves...
Microsoft Windows XP/2000 RunDLL32.EXE Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable application as a routine name for a...
CactuShop - User Invoices Persistent XSS Vulnerability
No description provided by source. User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406 Advisory URL: http://www.coresecurity.com/content/cactushop-xss-persistent-vulnerability Da...