951 matches found
Microsoft Exchange Server Calendar Remote Code Execution Vulnerability
Description Microsoft Exchange Server is prone to a vulnerability that may let attackers execute code remotely. This issue is exposed when the server handles emails that contain malicious calendar data that is included in meeting requests. If the issue is successfully exploited, this could...
Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue results from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...
Microsoft Excel Malformed Parsing Format File Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. This issue may be triggered when a malformed Excel document is opened. Technologies Affected Avaya Modular Messaging MAS 3.0.0 Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 SP3 Microsoft Excel 2000...
Microsoft Excel Malformed Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. This issue may be triggered when a Excel document with malformed record data is opened. Technologies Affected Avaya Modular Messaging MAS 3.0.0 Microsoft Excel 2000 Microsoft Excel 2000 SP2 Microsoft Excel 2000 SP3...
Microsoft Windows Web Client Buffer Overflow Vulnerability
Description Microsoft Windows Web Client is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with System privileges. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium Microsoft...
Ubuntu 4.10 : squid vulnerabilities (USN-84-1)
When parsing the configuration file, squid interpreted empty Access Control Lists ACLs without defined authentication schemes in a non-obvious way. This could allow remote attackers to bypass intended ACLs. CAN-2005-0194 A remote Denial of Service vulnerability was discovered in the domain name...
Blog System v1.2 SQL inj. vuln.
Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...
Microsoft Internet Explorer COM Object Instantiation Buffer Overflow Vulnerability
Description Microsoft Internet Explorer is prone to a buffer-overflow vulnerability that is exposed when certain COM objects are instantiated as ActiveX controls. A malicious webpage could pass content to these objects to trigger memory corruption. Successful exploits could let remote attackers...
DEBIAN-CVE-2005-0194
Squid 2.5, when processing the configuration file, parses empty Access Control Lists ACLs, including proxyauth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warning...
CVE-2002-1646
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes e.g. password than configured for the server...
Microsoft SMTP Service and Exchange Routing Engine Buffer Overflow Vulnerability
Description The Microsoft Windows 2003 SMTP Service and Exchange Routing Engine have been reported prone to a buffer overflow. This occurs during the processing responses to DNS lookups. Successful exploitation could allow for remote code execution in the context of the vulnerable service...