Design/Logic Flaw

Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff...

Microsoft Pragmatic General Multicast (PGM) DoS Vulnerability (950762)

This host is missing a critical security update according to Microsoft Bulletin MS08-036. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Pragmatic General Multicast (PGM) Denial of Service Vulnerability (950762)

This host is missing a critical security update according to Microsoft Bulletin MS08-036. OpenVAS Vulnerability Test $Id: gbms08-036.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Pragmatic General Multicast PGM Denial of Service Vulnerability 950762 Authors: Madhuri D Copyright: Copyright c...

Crafted IP Option Vulnerability

Cisco routers and switches running Cisco IOS or Cisco IOS XR software may be vulnerable to a remotely exploitable crafted IP option Denial of Service DoS attack. Exploitation of the vulnerability may potentially allow for arbitrary code execution. The vulnerability may be exploited after processi...

FreeBSD : multiple vulnerabilities in ethereal (cdf18ed9-7f4a-11d8-9645-0020ed76ef5a)

Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including : - NetFlow - IGAP - EIGRP - PGM - IRDA - BGP - ISUP - TCAP - UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited...

Arbitrary file deletion

asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...

Sql injection

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action...

CVE-2008-3240: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrary SQL commands via the pgm parameter in a directory action...

Alstrasoft Affiliate Network Pro - pgm SQL Injection

Alstrasoft Affiliate Network Pro - pgm SQL Injection || | |AlstraSoft Affiliate Network Pro pgm Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script ...

Microsoft Windows PGM DoS

Infinite loop on PGM packet parsing...

Microsoft Windows PGM报文多个拒绝服务漏洞（MS08-036）

BUGTRAQ ID: 29508,29509 CVECAN ID: CVE-2008-1440,CVE-2008-1441 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的实际通用多播（PGM）协议实现中存在多个拒绝服务漏洞，如果远程攻击者发送了带有无效长度的PGM报文，或PGM畸形碎片的话，就可能导致系统停止响应。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Window...

Microsoft Security Bulletin MS08-036 – Important Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)

Microsoft Security Bulletin MS08-036 – Important Vulnerabilities in Pragmatic General Multicast PGM Could Allow Denial of Service 950762 Published: June 10, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the Pragmati...

Microsoft Windows PGM Fragment Handling Denial of Service (MS08-036; CVE-2008-1441)

PGM is a reliable and scalable multicast protocol that enables receivers to detect loss, request retransmission of lost data, or notify an application of unrecoverable loss. The vulnerability is due to the PGM's parsing code that fails to properly handle malformed PGM packets that contain an...

CVE-2008-1441

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service system hang via a series of Pragmatic General Multicast PGM packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."...

Design/Logic Flaw

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service system hang via a series of Pragmatic General Multicast PGM packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."...

CVE-2008-1440

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...

CVE-2008-1440

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...

CVE-2008-1440

CVE-2008-1440 is a Windows DoS vulnerability in Pragmatic General Multicast (PGM) caused by improper validation of the PGM option length field. A remote attacker can trigger an infinite loop by sending a crafted PGM packet, rendering affected systems non-responsive and requiring a restart. Affect...

CVE-2008-1441

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service system hang via a series of Pragmatic General Multicast PGM packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."...

CVE-2008-1441

CVE-2008-1441 describes a denial-of-service vulnerability in Pragmatic General Multicast (PGM) in Windows XP (SP2/SP3), Windows Server 2003 (SP1/SP2), Windows Vista (Gold/SP1), and Windows Server 2008. The flaw is due to improper validation in the PGM parser when handling malformed PGM fragments,...