CGI Generic XSS (HTTP Headers)

The remote web server hosts CGI scripts that fail to adequately sanitize HTTP headers of malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected site. Note that...

Microsoft Windows Explorer Search-ms File Parsing Code Execution (MS08-038; CVE-2008-1435)

There exists a code execution vulnerability in Microsoft Windows Explorer. The vulnerability is due to insecure design in the way Microsoft Windows Explorer parses and saves saved-search.search-ms files. Unauthenticated remote attackers can exploit this vulnerability by enticing the target user t...

VMware WebAccess Multiple Vulnerabilities - Linux

VMWare Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Yahoo! Messenger Webcam ActiveX Control Stack Buffer Overflow (CVE-2007-3147; CVE-2007-3148)

Yahoo! Messenger is an instant messaging communicating application developed by Yahoo! Inc. One of the features that Yahoo! Messenger provides is the ability to send and receive video content. The Yahoo! Webcam ActiveX controls shipped with Yahoo! Messenger is used to handle the video data in a...

Novell eDirectory LDAP NULL Search Parameter Buffer Overflow (CVE-2008-1809)

Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. The eDirectory LDAP server uses TCP port 389 for clear text LDAP communication. There exists a heap buffer overflow vulnerability in Novell eDirectory. The flaw is due to an incorrect calculation when...

Mozilla Firefox ClearTextRun Function Memory Corruption (CVE-2009-1313)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Sun JDK Hard Coded Image in Java File (CVE-2007-2788)

Java Technology is a programming platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is widely used for web applications in numerous forms, one of which are Java Applets. The Java Development Kit JDK is a Sun...

Apple QuickTime for Java toQTPointer Function Memory Corruption (CVE-2007-2175)

Apple QuickTime is a multi-platform, industry-standard, multimedia software architecture. It is used by software developers, hardware manufacturers, and content creators to author and publish multiple media documents. Java is an object-oriented language that includes a set of libraries that...

IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...

IBM Tivoli Storage Manager Express CAD Service Buffer Overflow (CVE-2007-4880)

IBM Tivoli Storage Manager TSM is a backup solution which is meant to protect data from failures and other errors by storing backups and archiving data. The product is available for multiple platforms and various hardware architectures. The Tivoli Storage Manager backup client is composed of...

Microsoft Exchange Server Buffer Overflow (CVE-2005-0560)

Microsoft Exchange Server is a messaging and collaboration server. It is an extensive application designed to provide email and scheduling capabilities for medium to large organizations. The server has the capability to communicate with email clients and other servers using the SMTP protocol. A...

Mozilla Firefox XBL Event Handler Tags Removal Memory Corruption (CVE-2007-5339)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, Javascript, various graphics formats, and so on. The browser runs on...

GNOME Project libxslt Library RC4 Key String Buffer Overflow (CVE-2008-2935)

XSLT is an XML language to define transformation for XML. XSLT is designed for use as part of XSL, which is a stylesheet language for XML. In addition to XSLT, XSL includes an XML vocabulary for specifying formatting. There exists a heap based buffer overflow vulnerability in RC4 libxslt...

Microsoft Internet Explorer 'VBScript' RCE Vulnerability

Internet Explorer and VBScript are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Jet Engine MDB File Parsing Buffer Overflow (CVE-2007-6026)

Microsoft Office Access, previously known as Microsoft Access, is a relational database management system from Microsoft which combines the relational Microsoft Jet Database Engine with a graphical user interface and software development tools. There exists a buffer overflow vulnerability in...

Internet Explorer HHCtrl.ocx Image Property Heap Corruption (MS06-046; CVE-2006-3357)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The browser is also compatible with Microsoft's Common Object Model COM scheme, whereby...

Sun Java Web Start JNLP java-vm-args Heap Buffer Overflow (CVE-2008-3111)

The Sun Java Web Start is a component of the Java 2 Runtime Environment JRE. It allows for the network deployment of Java applications. This component enables stand-alone Java applications to be downloaded from a remote network location and invoked on a target machine. There exists a heap buffer...

MySQL MaxDB Webtool GET Command Buffer Overflow (CVE-2005-0684)

MaxDB is an open source database application suite developed by MySQL AB available for various operating systems. The software bundles an HTTP server component, named Webtool, used to provide web-based application interfaces. Clients can connect to the Webtool with a web browser and access...

Firefox XBM Image Processing Buffer Overflow (CVE-2005-2701)

The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so on. The web browser is capable of rendering images of numerous types. Some of the types Firefox is able to render are Joint Photographic Exper...

Sun Java Web Start Charset Encoding Stack Buffer Overflow (CVE-2008-1188)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety of programs that are deployed on personal computers as well as embedded devices and cell phones. Java is...