Code injection

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

The CVE-2009-3038 issue affects the ActiveX control in lnresobject.dll 7.1.1.119 used by the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11. The vulnerability allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the ...

CVE-2009-3038

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-2643

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server BES software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service memory...

Design/Logic Flaw

The Research In Motion RIM BlackBerry 8800 allows remote attackers to cause a denial of service memory consumption and browser crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

BlackBerry附件服务PDF处理器多个未明安全漏洞

Bugraq ID: 35102 CNCAN ID：CNCAN-2009052702 BlackBerry企业服务器的BlackBerry附件服务组件处理恶意PDF文件时存在多个安全问题，远程攻击者可以利用漏洞以应用服务进程权限执行任意指令，或导致拒绝服务攻击。 攻击者可以通过发送包含特殊构建的PDF文件的EMAIL消息来触发，目前没有详细漏洞细节提供。 Symantec Clientless VPN Gateway 4400 Series 4.0 SP3 Symantec Clientless VPN Gateway 4400 Series 4.0 SP2 Symantec...

BlackBerry Enterprise Server MDS连接服务跨站脚本漏洞

BUGTRAQ ID: 34573 CVE ID：CVE-2009-0307 CNCVE ID：CNCVE-20090307 BlackBerry Enterprise Server是一款BlackBerry企业解决方案中的一个组件。 BlackBerry Enterprise Server包含的MDS连接服务存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 提交畸形URL可触发此漏洞，目前没有详细漏洞细节提供。 Research In Motion Blackberry Enterprise Server 4.1.6 MR4 Research In Motion...

Microsoft DirectShow memory corruption

Memory corruption on Motion JPEG files decompression...

Unfixed XSS vulnerability at www.motion-twin.com

Security researcher P.A., has submitted on 01/09/2009 a cross-site-scripting XSS vulnerability affecting www.motion-twin.com, which at the time of submission ranked 13212 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/09/2009. It is current...

Gentoo Security Advisory GLSA 200807-02 (motion)

The remote host is missing updates announced in advisory GLSA 200807-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200807-02 (motion)

The remote host is missing updates announced in advisory GLSA 200807-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Microsoft GDI+ BMP Integer Overflow Vulnerability

Description Microsoft GDI+ is prone to an integer-overflow vulnerability. An attacker can exploit this issue by enticing unsuspecting users to view a malicious BMP file. Successfully exploiting this issue allows remote attackers to corrupt memory and execute arbitrary code in the context of the...

GLSA-200807-02 : Motion: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200807-02 Motion: Execution of arbitrary code Nico Golde reported an off-by-one error within the readclient function in the webhttpd.c file, leading to a stack-based buffer overflow. Stefan Cornelius Secunia Research reported a...

Motion: Execution of arbitrary code

Background Motion is a program that monitors the video signal from one or more cameras and is able to detect motions. Description Nico Golde reported an off-by-one error within the readclient function in the webhttpd.c file, leading to a stack-based buffer overflow. Stefan Cornelius Secunia...

[Full-disclosure] Secunia Research: Motion "read_client()" HTTP Request Buffer Overflow

====================================================================== Secunia Research 23/06/2008 - Motion "readclient" HTTP Request Buffer Overflow - ====================================================================== Table of Contents Affected...

Motion video monitoring program buffer overflow

Buffer overflow in HTTP server...

CVE-2008-2654

Off-by-one error in the readclient function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and...

CVE-2008-2654

Off-by-one error in the readclient function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and...

Stack overflow

Off-by-one error in the readclient function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and...

DEBIAN-CVE-2008-2654

Off-by-one error in the readclient function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and...