1492 matches found
Apple QuickTime STSD Atoms Handling Heap Overflow (CVE-2007-3750)
Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. QuickTime Video Clip file is one of the video formats supported by QuickTime. A QuickTime Video Clip or QuickTi...
IBM Rational RequisitePro ReqWebHelp Multiple XSS
IBM Rational RequisitePro is installed on the remote host. The installed version contains two JSP scripts that are affected by cross-site scripting vulnerabilities. Specifically, it fails to sanitize input to the 'searchWord', 'maxHits', 'scopedSearch', and 'scope' parameters of 'searchView.jsp'...
Gaim AIM-ICQ Protocol Handling Buffer Overflow (CVE-2005-2103)
Gaim is a multi-protocol, multi-platform instant messaging client. The product supports numerous protocols such as AIM and ICQ, MSN, Yahoo!, and IRC. Gaim allows one user to log into multiple accounts on multiple IM networks simultaneously. The AIM/ICQ protocol is a TCP based instant message...
Apple QuickTime H.264 Crafted Movie Buffer Overflow (CVE-2006-4381)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...
Apple QuickTime Plug-In Security Bypass (CVE-2006-4965; CVE-2007-4673)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying still image files as well as numerous audio and video formats. It also provides libraries and plugins for other applications, such as browsers, to read QuickTime media...
Winamp XM File Heap Buffer Overflow (CVE-2004-1896)
Winamp is a popular media player for the Windows operating system. There is a buffer overflow within the parsing of .XM media files that can lead to arbitrary code execution. There is a buffer overflow in the .XM file type decoded within Winamp, a popular media file player for the Windows Operati...
Apple QuickTime udta Atom Buffer Overflow (CVE-2006-1460)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processing the Apple QuickTime movie file format, which is a proprietary format created by Appl...
Novell eDirectory HTTP Server Redirection Buffer Overflow (CVE-2006-5478)
Novell eDirectory is a Lightweight Directory Access Protocol LDAP server, intended for use as a part of an identity management solution. The product is made available for multiple platforms including NetWare, Unix-like systems, and Windows. A code execution vulnerability has been reported in the...
Firefox Domain Name Handling Buffer Overflow (CVE-2005-2871)
The Internationalized Domain Names IDN standard defines specifications for the representation of domain names containing non-ASCII characters. The IDN standard has been developed to allow representation of Unicode domain names without depending on alterations to any network infrastructure...
Cerulean Studios Trillian AIM XML Tag Handling Heap Buffer Overflow (CVE-2008-5403)
Cerulean Studios' Trillian is an instant messaging IM client application that can interact with various IM protocols such as MSN, AIM, ICQ, YAHOO, etc. Specifically, AIM clients uses Open System for Communication in Realtime OSCAR protocol to talk to the backend servers. In Trillian, communicatio...
Internet Explorer IsComponentInstalled Buffer Overflow (CVE-2006-1016)
The Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, scripting languages and interpretation of various other popular Internet specifications. There exists a buffer overflow vulnerability in the IsComponentInstalled function...
ProFTPD SReplace Function Buffer Overflow (CVE-2006-5815)
The ProFTPD server is a full featured File Transfer Protocol FTP server mainly used in Linux distributions. Aside from the standard FTP features, the server supports a number of extensions. There exists a buffer overflow vulnerability in ProFTPD FTP server. The vulnerability is due to improper...
FlashGet FTP PWD Command Stack Buffer Overflow (CVE-2008-4321)
FlashGet is a download manager application. It uses multi-threading technique in the downloading transaction. The FlashGet supports various protocols such as FTP and HTTP. A buffer overflow vulnerability exists in FlashGet. The vulnerability is caused by insufficient boundary checking. An attacke...
RealNetworks RealPlayer Error Message Format String (CVE-2005-2710)
RealPlayer and Helix Player are media players developed by RealNetworks, Inc. These applications are capable of playing back numerous multimedia file formats. They support a streaming slide show technology called RealPix that allows for the creation of presentations that include image content. Th...
UltraVNC VNCViewer Authenticate Buffer Overflow (CVE-2009-0388)
Virtual Network Computing VNC is a graphical desktop sharing technology that uses the Remote Frame Buffer RFB protocol to remotely control another computer. The controller computer client or viewer sends keyboard and mouse events to the controlled computer server; the controlled computer sends...
Symantec SecurityExpressions Audit and Compliance Server Multiple XSS
Symantec SecurityExpressions Audit and Compliance Server is installed on the remote host. The installed version is affected by multiple cross-site scripting vulnerabilities. - The web console fails to sanitize user-supplied input to certain unspecified parameters. An authorized user may be able t...
Adobe Acrobat JavaScript getIcon Method Buffer Overflow (CVE-2009-0927)
Adobe develops products for creating, distributing, and viewing Portable Document Format PDF documents. Adobe Reader is a viewer application that allows for reading and the printing of PDF documents. Adobe Acrobat provides PDF authoring functionality in addition to those of viewing. A buffer...
IBM Lotus Expeditor cai URI Handler Command Execution (CVE-2008-1965)
IBM Lotus Expeditor is a software framework for the development, integration and deployment of client applications. The framework include components that run on desktop computers, handheld devices, and management servers. There exist a buffer overflow vulnerability in IBM Lotus Symphony and Lotus...
Apple QuickTime obji Atom Parsing Stack Buffer Overflow (CVE-2008-1022)
There exists a stack buffer overflow vulnerability in Apple QuickTime application. The vulnerability is due to improper processing of atoms in QuickTime movie files. A remote attacker may exploit this vulnerability by providing a crafted QuickTime movie file to the target user, causing abnormal...