daloRADIUS login.php error Parameter XSS

The remote web server hosts daloRADIUS, an advanced RADIUS web management application. The installed version of daloRADIUS server fails to sanitize user- supplied input to the 'error' parameter of the 'login.php' script before using it to generate dynamic HTML output. An attacker may be able to...

Novell eDirectory evtFilteredMonitorEventsRequest Function Heap Overflow (CVE-2006-4509)

Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. On a default installation, the eDirectory LDAP server uses TCP port 389 for clear text LDAP communication. A heap buffer overflow vulnerability exists in the Novell eDirectory product line. The flaw is...

Mozilla Products QueryInterface Method Memory Corruption (CVE-2006-0295)

The Mozilla Firefox browser adheres to most published Internet standards and is capable of processing static as well as dynamic HTML content. In addition to supporting the general protocols and standards, the Mozilla browsers implement several custom standards, one of which is the XPCOM component...

Microsoft Visio DXF File Handling Code Execution (MS08-019; CVE-2008-1090)

Microsoft Visio is a diagramming application that is part of the Microsoft Office suite. There exists a memory corruption vulnerability in the way Microsoft Visio handles specially-crafted DXF files. Remote attackers can exploit this vulnerability by enticing target users to open a specially...

Oracle Database Trigger MDSYS.SDO_TOPO_DROP_FTBL SQL Injection (CVE-2008-3979)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects such as procedures, functions, triggers, variables, constants, cursors, and exceptions, are provided in order t...

IBM Tivoli Monitoring Express Universal Agent Buffer Overflow (CVE-2007-2137)

IBM Tivoli Monitoring Express allows management of performance and availability of business systems and application resources. It features centralized and simplified management facilities to identify resources, applications, and network problems. It can build both real time and historical reports...

Apple QuickTime SMIL File Handling Integer Overflow (CVE-2007-2394)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. One of the media formats supported by Apple QuickTime is SMIL. An integer overflow vulnerability exists in Apple QuickTime. The...

Red Hat Directory Server Accept-Language HTTP Header Parsing Buffer Overflow (CVE-2008-2928)

Red Hat Directory Server is an LDAP-based server that centralizes application settings, user profiles, group data, policies, and access control information into an operating system-independent, network-based registry. Fedora Directory Server is a free version of Red Hat Directory Server. There...

CA BrightStor ARCserve Backup Media Server SUN-RPC Service Buffer Overflow (CVE-2007-2139)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow (CVE-2008-0660)

Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...

Oracle Database Server XDB PITRIG_TRUNCATE Procedure Buffer Overflow (CVE-2008-0339)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Microsoft Windows Folder GUID Code Execution (MS06-045; CVE-2006-3281)

Microsoft Windows is a very popular operating system that is deployed the majority of desktops and workstations in business and home user environments. Included with the operating system is a graphical file browsing and execution shell called Windows Explorer. The application is capable of...

Internet Explorer COM Object Instantiation Memory Corruption (CVE-2006-4495)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating an object. ...

Citrix Systems Multiple Products IMA Service Buffer Overflow (CVE-2008-0356)

The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a buffer overflow vulnerability in Independent...

Microsoft VB Common Controls Animation Object Buffer Overflow (MS08-070; CVE-2008-4255)

The Microsoft Visual Studio 6.0 integrated development environment IDE suite is designed for building Windows based applications and Web solutions. The product contains several tools which can be used to design programs in languages such as Visual C++, or Visual Basic. Microsoft Basic 6.0 is...

Apple QuickTime FPX File Handling Integer Overflow (CVE-2006-1249)

Apple QuickTime is a popular multi-media playback and light editing application. The QuickTime suite includes the QuickTime Player, which is capable of displaying movies, images and audio, as well as the PictureViewer, which is a light-weight application capable of displaying still images only. T...

Trend Micro Control Manager Chunked Overflow (CVE-2005-1929)

The Trend Micro Control Manager product is a centralized outbreak management console. It is meant to consolidate the coordination of outbreak security actions and the management of Trend Micro products and services. The product is a central command center for management of infections or...

Borland StarTeam Multicast Service HTTP Handling Buffer Overflow (CVE-2008-0311)

StarTeam is a revision control and SCM software system, originally produced by Starbase Corporation, and acquired by Borland in 2003. The system is backed by a relational database, that retains all changes made to a project during its evolution. Borland StarTeam can be installed as a component of...

Office OCX Multiple ActiveX Controls OpenWebFile Arbitrary Program Execution

Office OCX provides multiple software products that parse various Microsoft Office documents. Some of these products include Word Viewer OCX, Excel Viewer OCX, PowerPoint Viewer OCX, and Office Viewer OCX. These products act as ActiveX document containers to create, open, edit, and print...

Microsoft XML Core Services Memory Corruption (MS07-042; CVE-2007-2223)

Microsoft Windows is shipped with an XML processing framework, named MSXML or Microsoft XML Core services. The framework is used by applications shipped with the operating system as well as third party applications. The most popular application using this framework is Internet Explorer, which can...