1420 matches found
CVE-2007-2619
Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785...
PHP 5.1.6 - 'Msg_Receive()' Memory Allocation Integer Overflow
source: https://www.securityfocus.com/bid/23236/info PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to cause a buffer overflow and to corrupt process memory. Exploiting this issue may allow attacker...
[NB07-22] Multiple vulnerabilities in NETxEIB OPC server
Multiple vulnerabilities in NETxEIB OPC server ============================================== OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as DNP3, MODBUS, etc. to a more standard data access interface. The...
Design/Logic Flaw
xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file permissions and read other users' files, or obtain other sensitive information, by reading the xterm process memory. NOT...
Microsoft Internet Explorer 6/7/8 - 'li' Element Denial of Service (3)
source: https://www.securityfocus.com/bid/36070/info Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the nature of this issue, attackers may al...
Microsoft Internet Explorer 678 - li Element Denial of Service (3)
Microsoft Internet Explorer 678 - li Element Denial of Service 3 source: https://www.securityfocus.com/bid/36070/info Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in...
Microsoft Office 2000/2002 - Property Code Execution
source: https://www.securityfocus.com/bid/18911/info Microsoft Office is prone to a code-execution vulnerability. This is due to a failure to handle exceptional conditions. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context o...
CVE-2006-2708
Secure Elements Class 5 AVR client aka C5 EVM before 2.8.1 allows remote attackers to read portions of process memory via a modified size for 1 EMGETCEPARAMETER and 2 EMSETCEPARAMETER messages, which leads to a buffer overflow probably an over-read...
Buffer overflow
Secure Elements Class 5 AVR client aka C5 EVM before 2.8.1 allows remote attackers to read portions of process memory via a modified size for 1 EMGETCEPARAMETER and 2 EMSETCEPARAMETER messages, which leads to a buffer overflow probably an over-read...
CVE-2006-2708
CVE-2006-2708 affects Secure Elements Class 5 AVR client (C5 EVM) prior to version 2.8.1. Affected component: EM_GET_CE_PARAMETER and EM_SET_CE_PARAMETER message handling. Root cause: remote attackers can alter the size parameter, causing a buffer over-read/read of process memory. Impact (per sou...
Secure Elements Class 5 AVR client fails to properly validate the size of EM_GET_CE_PARAMETER messages
Overview The Secure Elements Class 5 AVR client fails to properly handle the size of EMGETCEPARAMETER messages. This may allow an attacker to cause a buffer overflow and reveal process memory. Description Class 5 AVR Secure Elements Class 5 AVR Automated Vulnerability Remediation is a security...
Windows limited service account privilege escalation
By using security tokens located in process memory it's possible to escalate privileges from limited service account, such as Network Service or Microsoft SQL Service account...
CVE-2005-2762
Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials...
CVE-2005-2762
Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials...
Novell Groupwise Client 6.5.3 - Local Integer Overflow
Novell Groupwise Client 6.5.3 - Local Integer Overflow source: https://www.securityfocus.com/bid/14952/info Novell GroupWise Client is prone to a local integer overflow vulnerability. The attacker may leverage this issue to corrupt process memory, which may lead to a crash or arbitrary code...
Vuln: Password Disclosure in Whisper32
Password Disclosure in Whisper32 Vendor: Shaun Ivory http://www.ivory.org Download Location: http://www.ivory.org/whisper.html Versions affected: Whisper32 1.16 and may be prior Date: 13th August 2005 Type of Vulnerability: Information Disclosure in Memory of Process Severity: Medium Solution...
Whisper passwords manager cleartext password
Passwords are visible in cleartext in process memory. Password for password store is not used in ecnryption, allowing to restore passwords from password file...
Nortel VPN Client Issue: Clear-text password stored in memory
Nortel VPN Client Issue: Clear-text password stored in memory Summary: NTA Monitor have discovered a password disclosure issue in the Nortel Windows VPN client: The Nortel client stores the password in an obfuscated form in the Windows registry, but it also stores the unencrypted password in...
PHP 4.x/5.0 Shared Memory Module - Offset Memory Corruption
source: https://www.securityfocus.com/bid/12045/info PHP shared memory module shmop is reported prone to an integer handling vulnerability. The issue exists in the PHPFUNCTIONshmopwrite function and is as a result of a lack of sufficient sanitization performed on 'offset' data. This vulnerability...