CVE-2007-6254

CVE-2007-6254 involves a stack-based buffer overflow in the SAP BusinessObjects RptViewerAX ActiveX control (RptViewerAX.dll) for BusinessObjects 6.5, prior to CHF74. The overflow in the RptViewerAX ActiveX control can allow a remote attacker to execute arbitrary code, with exploitation described...

Microsoft Office memory corruption

Memory corruption on malformed embedded objects...

CVE-2008-0631

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...

CVE-2008-0631

Affected product/component: MailBee Objects 5.5, specifically the MailBee.dll ActiveX controls. Vulnerability: Remote attackers can cause file manipulation via two methods—SaveToDisk (overwrite arbitrary files) and AddStringToFile (modify files). Root cause/conditions: Multiple ActiveX controls a...

mailbee-insecure.txt

======================================================================= MailBee Objects v5.5 MailBee.dll Insecure Method Web site : http://www.afterlogic.com/ ======================================================================= Author: darkl0rd E-mail: [email protected] Tested on Windows ...

MailBee Objects 5.5 (MailBee.dll) Remote Insecure Method Exploit

No description provided by source. body bgcolor="000000" div align="center" precodespan style="font: 10pt verdana;"font color="00FF00"=======================================================================/font /divcenter font face="Verdana" color="00FF00"bMailBee Objects v5.5 MailBee.dll Insecur...

MailBee Objects 5.5 - MailBee.dll Remote Insecure Method

MailBee Objects 5.5 - MailBee.dll Remote Insecure Method ======================================================================= MailBee Objects v5.5 MailBee.dll Insecure Method Web site : http://www.afterlogic.com/ ======================================================================= Author:...

MailBee Objects 5.5 (MailBee.dll) Remote Insecure Method Exploit

Exploit for unknown platform in category remote exploits ================================================================ MailBee Objects 5.5 MailBee.dll Remote Insecure Method Exploit ================================================================...

MailBee Objects 5.5 - 'MailBee.dll' Remote Insecure Method

======================================================================= MailBee Objects v5.5 MailBee.dll Insecure Method Web site : http://www.afterlogic.com/ ======================================================================= Author: darkl0rd E-mail: [email protected] Tested on Windows ...

Crystal Reports Central Management Server Detection

The remote service is a Central Management Server also known as Crystal Management Server and Automated Process Scheduler, a key component of Crystal Reports Server that centralizes information about users, security levels, published objects, and servers. %NASLMINLEVEL 70300 C Tenable Network...

crystal-dos.txt

Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg web: http://shinnai.altervista.org 1...

Debian Security Advisory DSA 043-1 (zope)

The remote host is missing an update to zope announced via advisory DSA 043-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1227-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1227-1. Several security related problems have been discovered in Mozilla and derived products such as Mozilla Thunderbird. The Common Vulnerabilities and Exposures project identifies the following...

VulnCheck KEV: CVE-2007-5347

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption Vulnerability."...

Analysis of ring3 under the confrontation 0 8 rising active Defense-vulnerability warning-the black bar safety net

Note: the article has been published in 2 0 0 7 years 1 2 the hack Defense action, after by the original author to submit to the evil octal information security team, the reprint please indicate the original source. I actually for rising antivirus the impression has been is good, to consume...

squid: DoS in cache updates

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects...

Memory corruption

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses document objects using the tags property, which triggers heap corruption, related to uninitialized or deleted objects, ...

Memory corruption

Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the 1 cloneNode or 2 nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory...

ZDI-07-075: Microsoft Internet Explorer Element Tags Vulnerability

ZDI-07-075: Microsoft Internet Explorer Element Tags Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-075.html December 11, 2007 -- CVE ID: CVE-2007-5344 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 Internet Explorer 7 -- TippingPointTM IPS Customer...

Microsoft Internet Explorer Element Tags Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the handling of document objects...