Apple QuickTime 6/7 - '.FLC' Movie COLOR_64 Chunk Overflow

source: https://www.securityfocus.com/bid/19976/info Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary code in the context of the victim user running the...

CORE-2006-0321: AOL ICQ Pro 2003b heap overflow vulnerability

Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ AOL ICQ Pro 2003b heap overflow vulnerability Date Published: 2006-09-07 Last Update: 2006-09-06 Advisory ID: CORE-2006-0321 Bugtraq ID: None currently assigned CVE Name: None currently assigned Title: AOL ICQ Pr...

: AOL ICQ Pro 2003b heap overflow vulnerability

Date Published : 2006-09-07 Last Update : 2006-09-06 Advisory ID : CORE-2006-0321 Bugtraq ID : 19897 CVE Name : CVE-2006-4662 Title : AOL ICQ Pro 2003b heap overflow vulnerability Class : Boundary Error Condition Remotely Exploitable : Yes Locally Exploitable : Yes Advisory URL :...

PHP-Proxima 6.0 - BB_Smilies.php Local File Inclusion

PHP-Proxima 6.0 - BBSmilies.php Local File Inclusion source: https://www.securityfocus.com/bid/19840/info PHP-Proxima is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary local...

PHP-Proxima 6.0 - 'BB_Smilies.php' Local File Inclusion

source: https://www.securityfocus.com/bid/19840/info PHP-Proxima is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary local files from the vulnerable system in the context of the...

Microsoft Hyperlink Object Library Function Remote Buffer Overflow Vulnerability

Description Microsoft's Hyperlink Object Library is prone to a buffer-overflow vulnerability. This issue is due to the library's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successfully exploiting this issue allows attackers to...

Festalon 0.5 - .HES Remote Heap Buffer Overflow

Festalon 0.5 - .HES Remote Heap Buffer Overflow // source: https://www.securityfocus.com/bid/19402/info A buffer-overflow vulnerability occurs in the Festalon application because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...

Festalon 0.5 - '.HES' Remote Heap Buffer Overflow

// source: https://www.securityfocus.com/bid/19402/info A buffer-overflow vulnerability occurs in the Festalon application because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow attackers to execute...

Cisco MARS < 4.2.1 remote compromise

Cisco MARS Monitoring, Analysis and Response System, sometimes referred to as CS-MARS prior to version 4.2.1 ships with an unprotected JBoss installation which ultimately leads to a complete compromise of the device. The caveat here is that, despite much work on Cisco's part, they were not able t...

Cisco Security Monitoring Analysis and Response System JBoss - Command Execution

Cisco Security Monitoring Analysis and Response System JBoss - Command Execution source: https://www.securityfocus.com/bid/19075/info Cisco Security Monitoring, Analysis and Response System CS-MARS is prone to a vulnerability that could permit the execution of arbitrary commands. An attacker coul...

EEYE: McAfee ePolicy Orchestrator Remote Compromise

McAfee ePolicy Orchestrator Remote Compromise Release Date: July 13, 2006 Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee Common Management EPO Agent versions below version 3.5.5.438 Overview: McAfee ePolicy Orchestrator is the remote security management software for...

: Asterisk PBX truncated video frame vulnerability

Advisory ID Internal CORE-2006-0330 Date Published : 2006-06-09 Last Update : 2006-06-09 Advisory ID : CORE-2006-0330 Bugtraq ID : 18295 CVE Name : CVE-2006-2898 Title : Asterisk PBX truncated video frame vulnerability Class : Input Validation Error Remotely Exploitable : Yes Locally Exploitable ...

Remote compromise via content-defined setter on object prototypes — Mozilla

Paul Nickerson discovered that content-defined setters on an object prototype were getting called by privileged UI code, and mozbugra4 was able to develop an exploit PoC that demonstrated that the higher privilege level could be passed along to the content-defined attack code...

Security Update for Flash Player (KB913433)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system with a vulnerable version of the Flash Player and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you...

[Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability

Perhaps not surprisingly, there appears to be a vulnerability in how Microsoft Internet Explorer handles or fails to handle certain combinations of nested OBJECT tags. This was tested with MSIE 6.0.2900.2180.xpsp.040806-1825 and mshtml.dll 6.00.2900.2873 xpspsp2gdr.060322-1613. At first sight, th...

Re: [Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 Michal Zalewski wrote: Perhaps not surprisingly, there appears to be a vulnerability in how Microsoft Internet Explorer handles or fails to handle certain combinations of nested OBJECT tags. This was tested with MSIE 6.0.2900.2180.xpsp.040806-182...

Microsoft Outlook Express Windows Address Book File Parsing Buffer Overflow Vulnerability

Description Microsoft Outlook Express is prone to a remote buffer-overflow vulnerability. This vulnerability presets itself when the application processes a specially crafted Windows Address Book .wab file. An attacker may exploit this issue to execute arbitrary code in the context of a user...

[Full-disclosure] Barracuda LHA archiver security bug leads to remote compromise

Topic: Barracuda LHA archiver security bug leads to remote compromise Announced: 2006-04-03 Product: Barracuda Spam Firewall Vendor: http://www.barracudanetworks.com/ Impact: Remote shell access Affected product: Barracuda with firmware 3.3.03.022 AND spamdef 3.0.10045 Credits: Jean-Sebastien...

[Full-disclosure] Barracuda ZOO archiver security bug leads to remote compromise

Topic: Barracuda ZOO archiver security bug leads to remote compromise Announced: 2006-04-03 Product: Barracuda Spam Firewall Vendor: http://www.barracudanetworks.com/ Impact: Remote shell access Affected product: Barracuda with firmware 3.3.03.022 AND spamdef 3.0.9388 Credits: Jean-Sebastien...

Microsoft Windows Media Player Bitmap Handling Buffer Overflow Vulnerability

Description Microsoft Windows Media Player is prone to a remote buffer-overflow vulnerability. The vulnerability arises when the application handles a skin file containing a specially crafted bitmap image. This issue can also be triggered by just supplying a malicious bitmap to the application...