Python stringobject.c多个远程溢出漏洞

BUGTRAQ ID: 28749 Python是一种开放源代码的脚本编程语言。 Python的核心API提供了多个用于分配字符串对象的函数，其中一个API调用允许分配或重新分配PyStringObject，这个函数为PyStringFromStringAndSize，该函数获取了两个参数，分别为一个指针和一个有符整数。如果指针非空的话，就会将指向该指针的内存重新分配为第二个参数所指定的大小；如果指针为空，就会分配整数所指定的字节数并返回。 在这个操作期间，没有验证第二个参数是否为负数，而该值与PyStringObject的大小相加并用作了分配函数的长度，可能导致错误的内存分配。...

Adobe Flash Player 89.0.x - .SWF File DeclareFunction2 ActionScript Tag Remote Code Execution

Adobe Flash Player 89.0.x - .SWF File DeclareFunction2 ActionScript Tag Remote Code Execution source: https://www.securityfocus.com/bid/28694/info Adobe Flash Player is prone to a remote code-execution vulnerability when handling certain embedded ActionScript objects. An attacker may exploit this...

CVE-2008-1013

Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet...

DEBIAN-CVE-2008-1515

The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related to "Missing security checks."...

Stack overflow

Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors...

Apple Safari 3.1之前版本多个安全漏洞

BUGTRAQ ID: 28290 CVECAN ID: CVE-2008-1011,CVE-2008-1010,CVE-2008-1009,CVE-2008-1008,CVE-2008-1007,CVE-2008-1006,CVE-2008-1005,CVE-2008-1004,CVE-2008-1003,CVE-2008-1002,CVE-2008-1001,CVE-2008-0050 Safari是苹果家族操作系统默认所捆绑的WEB浏览器。 Safari的3.1版修复了多个安全漏洞，具体如下： CVE-2008-0050 恶意的HTTPS代理服务器可能在502 Bad...

CVE-2007-6254

CVE-2007-6254 involves a stack-based buffer overflow in the SAP BusinessObjects RptViewerAX ActiveX control (RptViewerAX.dll) for BusinessObjects 6.5, prior to CHF74. The overflow in the RptViewerAX ActiveX control can allow a remote attacker to execute arbitrary code, with exploitation described...

Microsoft Office memory corruption

Memory corruption on malformed embedded objects...

CVE-2008-0631

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...

CVE-2008-0631

Affected product/component: MailBee Objects 5.5, specifically the MailBee.dll ActiveX controls. Vulnerability: Remote attackers can cause file manipulation via two methods—SaveToDisk (overwrite arbitrary files) and AddStringToFile (modify files). Root cause/conditions: Multiple ActiveX controls a...

mailbee-insecure.txt

======================================================================= MailBee Objects v5.5 MailBee.dll Insecure Method Web site : http://www.afterlogic.com/ ======================================================================= Author: darkl0rd E-mail: [email protected] Tested on Windows ...

MailBee Objects 5.5 (MailBee.dll) Remote Insecure Method Exploit

No description provided by source. body bgcolor="000000" div align="center" precodespan style="font: 10pt verdana;"font color="00FF00"=======================================================================/font /divcenter font face="Verdana" color="00FF00"bMailBee Objects v5.5 MailBee.dll Insecur...

MailBee Objects 5.5 - MailBee.dll Remote Insecure Method

MailBee Objects 5.5 - MailBee.dll Remote Insecure Method ======================================================================= MailBee Objects v5.5 MailBee.dll Insecure Method Web site : http://www.afterlogic.com/ ======================================================================= Author:...

MailBee Objects 5.5 (MailBee.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ================================================================ MailBee Objects 5.5 MailBee.dll Remote Insecure Method Exploit ================================================================...

MailBee Objects 5.5 - 'MailBee.dll' Remote Insecure Method

======================================================================= MailBee Objects v5.5 MailBee.dll Insecure Method Web site : http://www.afterlogic.com/ ======================================================================= Author: darkl0rd E-mail: [email protected] Tested on Windows ...

Crystal Reports Central Management Server Detection

The remote service is a Central Management Server also known as Crystal Management Server and Automated Process Scheduler, a key component of Crystal Reports Server that centralizes information about users, security levels, published objects, and servers. %NASLMINLEVEL 70300 C Tenable Network...

crystal-dos.txt

Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg web: http://shinnai.altervista.org 1...

Debian Security Advisory DSA 043-1 (zope)

The remote host is missing an update to zope announced via advisory DSA 043-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1227-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1227-1. Several security related problems have been discovered in Mozilla and derived products such as Mozilla Thunderbird. The Common Vulnerabilities and Exposures project identifies the following...

VulnCheck KEV: CVE-2007-5347

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption Vulnerability."...