Wireshark LWRES Dissector getaddrsbyname Buffer Overflow (CVE-2010-0304)

A buffer overflow vulnerability has been reported in Wireshark. The vulnerability is due to insufficient boundary checking in the getaddrsbyname method. A remote attacker may exploit this vulnerability by sending an overly long string parameter to this method. Successful exploitation would allow...

McAfee Visual Trace ActiveX Control Buffer Overflow (CVE-2006-6707)

A code execution vulnerability has been reported in McAfee Visual Trace. The vulnerability is due to a boundary error in the NeoTraceExplorer.NeoTraceLoader ActiveX control. A remote attacker may exploit this vulnerability by passing an overly long string as argument to the "TraceTarget" method...

Apple Safari WebKit SVG Memory Corruption (CVE-2011-0222)

A memory corruption vulnerability has been reported in Apple Safari. The vulnerability is due to an error caused while handling Scalable Vector Graphics SVG objects. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation m...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow (CVE-2007-5603)

An arbitrary code execution vulnerability has been reported in SonicWall SSL-VPN NetExtender. The vulnerability is due to insufficient length validation by an ActiveX control. A remote attacker may exploit this vulnerability by sending a specially crafted request to an affected service. Successfu...

Microsoft Windows Messenger Service Buffer Overrun Code Execution (CVE-2003-0717)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper validation of message length. A remote attacker may exploit this vulnerability by sending an overly long message to the target service. Successful exploitation may allow the attacker...

RealNetworks RealPlayer QCP Parsing Buffer Overflow (CVE-2011-2950)

A code execution vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to insufficient bounds checking while parsing .qcp files. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted .qcp file with an affected version of...

Progea Movicon Negative Content-Length Buffer Overflow (CVE-2011-3491)

A remote code execution vulnerability has been reported in Progea Movicon. The vulnerability is due to a sanitization error while parsing the Content-Length header in an HTTP request. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to an affected serve...

Juniper Networks IVE ActiveX Control Buffer Overflow (CVE-2006-2086)

A buffer overflow vulnerability has been reported in Juniper Networks IVE. The vulnerability is due to a boundary error within an ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted web-page. Successful exploitation would allo...

EMC AutoStart Login Request Stack Buffer Overflow (CVE-2011-2735)

A remote code execution vulnerability has been reported in EMC AutoStart. The vulnerability is due to improper boundary checking in EMC AutoStart's Agent Service. A remote attacker may exploit this vulnerability by sending a malicious Login request to an affected service. Successful exploitation...

Adobe Photoshop CS5 GIF File Heap Corruption (CVE-2011-2131)

A remote code execution vulnerability has been reported in Adobe Photoshop CS5. The vulnerability is due to insufficient boundary checking while handling crafted GIF files. A remote attacker may trigger this vulnerability by enticing an unsuspecting user to open a malicious GIF file. Successful...

Oracle Java RMI Services Default Configuration Remote Code Execution

A remote code execution vulnerability has been reported in Oracle Java RMI services.The vulnerability is due to insufficient validation of URLs when loading a remote Java object. A remote attacker may exploit this vulnerability by sending a malicious RMI request to the target server. Successful...

Sybase Open Server Null Byte Stack Memory Corruption

A remote code execution vulnerability has been reported in Sybase Open Server. The vulnerability is due to an error in the processing of malformed login packets by the server. A remote attacker may exploit this vulnerability by sending a specially crafted packet to an affected Sybase server...

Tom Sawyer ActiveX Control Memory Corruption (CVE-2011-2217)

A code execution vulnerability has been reported in Tom Sawyer. The vulnerability is due to an error while instantiating the ActiveX control in a browser. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation of this...

Green Dam URL Length Buffer Overflow

A remote code execution vulnerability has been reported in Green Dam. The vulnerability is due to a boundary check error while filtering specially crafted URLs. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious link. Successful exploitation woul...

Apple Safari WebKit SVG Markers Use-After-Free Memory Corruption (CVE-2011-1453)

A use-after-free vulnerability has been reported in Apple Safari. The vulnerability is due to an error while handling Scalable Vector Graphics SVG objects. A remote attacker may trigger this vulnerability by enticing a target user to open a specially crafted SVG document, possibly embedded in a...

MODx < 2.0.3-pl modahsh Parameter XSS

The version of MODx hosted on the remote web server fails to sanitize the 'modahsh' parameter of the 'manager/index.php' script before using it to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this to inject arbitrary HTML an...

Internet Explorer Scroll Event Memory Corruption (MS11-081; CVE-2011-1993)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way IE accesses objects that have been deleted. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful exploitation may...

Microsoft Forefront UAG Poisoned Cup of Code Execution (MS11-079; CVE-2011-1969)

The vulnerability is due to a vulnerable Java applet that is installed on a browser by the Forefront Unified Access Gateway UAG server. A remote attacker may exploit this vulnerability by enticing a target user to open a malicious web-page using a Java-enabled Web-browser. Successful exploitation...

Adobe Reader JPEG Marker Code Execution (APSB11-24; CVE-2011-2440)

A code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error while parsing corrupted PDF files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file. Successful exploitation would allo...

Adobe Flash Player Speex Codec Buffer Underflow (ASBP11-26; CVE-2011-2130)

A buffer underflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient input validation by the application. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious web-page. Successful exploitation will allow an...