CVE-2014-5670: Undefined Security Weakness

The SAS: Zombie Assault 3 aka com.ninjakiwi.sas3zombieassault application 2.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5454

Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

CVE-2014-5454

Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

CVE-2014-5454

CVE-2014-5454: Unrestricted file upload vulnerability in the image upload module of SAS Visual Analytics 6.4M1 that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and then accessing it via unspecified vectors. The provided documents co...

PT-2014-6484

Name of the Vulnerable Software and Affected Versions SAS Visual Analytics version 6.4M1 Description The issue concerns an unrestricted file upload vulnerability in the image upload module. This allows remote authenticated users to execute arbitrary code by uploading a file with an executable...

CVE-2014-5454: Undefined Security Weakness

Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors...

SAS Integration Technologies Client 9.31_M1 (SASspk.dll) - Stack-Based Overflow

No description provided by source. !-- SAS Integration Technologies Client 9.31M1 SASspk.dll Stack-based Overflow Vendor: SAS Institute Inc. Product web page: http://www.sas.com Affected version: Deployment Manager 9.3.0.0 Model 12.05, TS1M2 SAS Integration Technologies Client 9.31M1 Summary: SAS...

CVE-2014-2262

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program...

Buffer overflow

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program...

CVE-2014-2262

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program...

CVE-2014-2262

Buffer overflow in the client application of Base SAS 9.2 TS2M3, SAS 9.3 TS1M1/TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote code execution via a crafted SAS program. Root cause: overflow in the client’s handling of SAS programs (no details on specific file/func). Impact: arbitrary code ex...

CVE-2014-2262: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program...

PT-2014-4591

Name of the Vulnerable Software and Affected Versions SAS versions 9.2 TS2M3, 9.3 TS1M1, 9.3 TS1M2, and 9.4 TS1M0 Description A buffer overflow issue exists in the client application, allowing remote attackers to execute arbitrary code via a crafted SAS program. Recommendations For SAS version 9....

Exclusive : Google Palestine domain hacked and defaced

Google has local domains for almost every country in the world. Just now some hackers from Palestine hacked into Google's Palestine domain and defaced it The message appearing on the defaced page says, "uncle google we say hi from Palestine to remember you that the country in google map not calle...

Exclusive : Google Palestine domain hacked and defaced

Google has local domains for almost every country in the world. Just now some hackers from Palestine hacked into Google's Palestine domain and defaced it The message appearing on the defaced page says, "uncle google we say hi from Palestine to remember you that the country in google map not calle...

SAS Integration Technologies Client ActiveX Stack Buffer Overflow

The version of the SAS Integration Technologies Client installed on the remote host is affected by a stack-based buffer overflow condition in the 'SASspk.dll' ActiveX control due to improper validation of user-supplied input to the RetrieveBinaryFile function via the 'bstFileName' parameter. An...

SAS Integration Technologies Client 9.31_M1 SASspk.dll - Stack Overflow

SAS Integration Technologies Client 9.31M1 SASspk.dll - Stack Overflow !-- SAS Integration Technologies Client 9.31M1 SASspk.dll Stack-based Overflow Vendor: SAS Institute Inc. Product web page: http://www.sas.com Affected version: Deployment Manager 9.3.0.0 Model 12.05, TS1M2 SAS Integration...

SAS Integration Technologies Client 9.31_M1 'SASspk.dll' - Stack Overflow

!-- SAS Integration Technologies Client 9.31M1 SASspk.dll Stack-based Overflow Vendor: SAS Institute Inc. Product web page: http://www.sas.com Affected version: Deployment Manager 9.3.0.0 Model 12.05, TS1M2 SAS Integration Technologies Client 9.31M1 Summary: SAS Integration Technologies provides...

SAS Integration Technologies Client 9.31_M1 Buffer Overflow

The SASspk module SASspk.dll version 9.310.0.11307, has a function called 'RetrieveBinaryFile' which has one parameter called 'bstrFileName' which takes arguments as strings as defined in the function itself as ISPKBinaryFile from the SASPackageRetrieve library. Stack-based buffer overflow was...

SAS Integration Technologies Client 9.31_M1 Buffer Overflow

!-- SAS Integration Technologies Client 9.31M1 SASspk.dll Stack-based Overflow Vendor: SAS Institute Inc. Product web page: http://www.sas.com Affected version: Deployment Manager 9.3.0.0 Model 12.05, TS1M2 SAS Integration Technologies Client 9.31M1 Summary: SAS Integration Technologies provides...