CVE-2008-3488: Undefined Security Weakness

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute code on vulnerable installations of RealPlayer. User interaction is required in that a user must visit a malicious web site. The specific flaw exists in the rmoc3260 ActiveX control exposed through the following CLSIDs:...

Core Image Fun House <= 2.0 Arbitrary Code Execution PoC (OSX)

No description provided by source. !/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' repeats 101 times, "DCBA center" 2007-07-10 21:15:34.573 Cor...

Core Image Fun House 2.0 (OSX) - Arbitrary Code Execution (PoC)

!/usr/bin/ruby Copyright c Netragard, LLC. [email protected] /Developer/Applications/Graphics Tools/Core Image Fun House.app /Contents/MacOS/Core Image Fun House gdb x/10s 0xbfffddf7 0xbfffddf7: 'Z' , "DCBA center" 2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0:...

The Microsoft Office Snapshot Viewer ActiveX Exploit-vulnerability warning-the black bar safety net

Source: http://hi.baidu.com/cloie/ Today someone made a Snapshot Viewer of the ADV, combined with the CERT that dranzer. pdf, to reproduce the vulnerability EXP: the var buf1 = 'http://127.0.0.1/a.exe'; var buf2 = 'C:/Documents and Settings/All Users/"Start"菜单 / 程序 / 启动 /test.exe'; obj...

Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a 1 location or 2 location.href property, related to incorrect determination of t...

CVE-2008-2949

CVE-2008-2949 describes a cross-domain vulnerability in Internet Explorer 6 and 7 where the attacker could manipulate the window.location object using a String to observe events across domains. The root cause is the incorrect determination of the origin of web script, enabling potential viewing o...

CVE-2008-2948

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

Buffer overflow

Buffer overflow in the DXTTextOutEffect ActiveX control aka the Text-Effect DXT Filter, as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value...

CVE-2008-2910

Buffer overflow in the DXTTextOutEffect ActiveX control aka the Text-Effect DXT Filter, as distributed in TextOut.dll 6.0.18.1 and mvtextout.dll, in muvee autoProducer 6.0 and 6.1 allows remote attackers to execute arbitrary code via a long FontSetting property value...

CVE-2008-2910

The CVE-2008-2910 issue concerns muvee autoProducer (versions 6.0 and 6.1) containing the DXTTextOutEffect ActiveX control (TextOut.dll 6.0.18.1 and mvtextout.dll). The root cause is a buffer overflow in the DXTTextOutEffect that occurs when a long FontSetting property value is processed, enablin...

CVE-2008-2948: Undefined Security Weakness

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

CVE-2008-2949: Undefined Security Weakness

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

Heap overflow

Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2880: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

GLSA-200806-06 : Evolution: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-06 Evolution: User-assisted execution of arbitrary code Alin Rad Pop Secunia Research reported two vulnerabilities in Evolution: A boundary error exists when parsing overly long timezone strings contained within iCalendar...

Unfixed XSS vulnerability at www.bigislandhawaiiproperty.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.bigislandhawaiiproperty.com, which at the time of submission ranked 7747284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008...

Heap overflow

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

DEBIAN-CVE-2008-1109

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...