3755 matches found
GLSA-200903-01 : Vinagre: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200903-01 Vinagre: User-assisted execution of arbitrary code Alfredo Ortega Core Security Technologies reported a format string error in the vinagreutilsshowerror function in src/vinagre-utils.c. Impact : A remote attacker could...
Vinagre: User-assisted execution of arbitrary code
Background Vinagre is a VNC Client for the GNOME Desktop. Description Alfredo Ortega Core Security Technologies reported a format string error in the vinagreutilsshowerror function in src/vinagre-utils.c. Impact A remote attacker could entice a user into opening a specially crafted .vnc file or...
Preemptive Protection against Microsoft SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability (MS09-004)
A remote code execution vulnerability has been reported in Microsoft SQL Server. Microsoft SQL Server is a relational database management system RDBMS. The flaw is in the way that SQL Server checks parameters in the "spreplwritetovarbin" extended stored procedure. By sending a specially crafted S...
Sun OpenSSO / Java System Access Manager Login Module User Account Enumeration Weakness
The remote host is running Sun OpenSSO, or Sun Java System Access Manager as it was previously known, an enterprise-class product that provides web access management, federation, and web services security. The version of the Login module included with Sun OpenSSO / Sun Java System Access Manager ...
Browser3D 3.5 (.sfs File) Local Stack Overflow Exploit (c)
includestdio.h includestring.h includewindows.h / Browser3D local BOF exploit coded by SimO-s0fT [email protected] greetz to: all friends & all morroccan hackers special tnx for str0ke / win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com / unsign...
Microsoft Excel TXO and OBJ record parsing memory corruption
Added: 12/18/2008 CVE: CVE-2008-4265 BID: 32618 OSVDB: 50556 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A memory corruption vulnerability allows command execution when a user opens an Excel...
Specially crafted addresses can execute arbitrary code
If a malicious page redirects Opera to a specially crafted address URL, it can cause Opera to crash. Given sufficient address content, the crash could cause execution of code controlled by the attacking page...
Microsoft Word PlfLfo Structure Memory Corruption (MS08-072; CVE-2008-4024)
Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory corruption error in Microsoft Word that fails to properly handle specially crafted Word files. A remote attacker could trigger th...
Microsoft Word RTF Drawing Primitives Remote Code Execution (MS08-072; CVE-2008-4028)
Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...
VLC Media Player TY Processing Buffer Overflow Vulnerability (Windows)
This host is installed with VLC Media Player and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayertybofvulnwin.nasl 5370 2017-02-20 15:24:26Z cfi $ VLC Media Player TY Processing Buffer Overflow Vulnerability Windows Authors: Veerendra GG Copyright:...
VLC Media Player XSPF Playlist Memory Corruption Vulnerability (Linux)
This host is installed with VLC Media Player and is prone to Memory Corruption Vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermemcrptnvulnlin.nasl 5158 2017-02-01 14:53:04Z mime $ VLC Media Player XSPF Playlist Memory Corruption Vulnerability Linux Authors: Veerendra GG Copyright:...
Wireshark: Multiple Denials of Service
Background Wireshark is a network protocol analyzer with a graphical front-end. Description The following vulnerabilities were reported: Multiple buffer overflows in the NCP dissector CVE-2008-3146. Infinite loop in the NCP dissector CVE-2008-3932. Invalid read in the tvbuncompress function when...
Gentoo Security Advisory GLSA 200504-02 (sylpheed)
The remote host is missing updates announced in advisory GLSA 200504-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Newsbeuter: User-assisted execution of arbitrary code
Background Newsbeuter is a RSS/Atom feed reader for the text console. Description J.H.M. Dassen reported that the open-in-browser command does not properly escape shell metacharacters in the URL before passing it to system. Impact A remote attacker could entice a user to open a feed with speciall...
GLSA-200809-01 : yelp: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200809-01 yelp: User-assisted execution of arbitrary code Aaron Grattafiori reported a format string vulnerability in the windowerror function in yelp-window.c. Impact : A remote attacker can entice a user to open specially crafte...
F-PROT Antivirus Multiple Vulnerabilities
The remote host is installed with F-PROT Antivirus, which is prone multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodf-protavmultvuln900018.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: F-PROT Antivirus Multiple Vulnerabilities Authors: Chandan S Copyright:...
Opera < 9.52 Multiple Vulnerabilities
Binary data 4634.prm...
8E6 Technologies R3000 - Host Header Internet Filter Security Bypass
source: https://www.securityfocus.com/bid/30541/info 8e6 Technologies R3000 Internet Filter is prone to a vulnerability that allows attackers to bypass URI filters. Attackers can exploit this issue by sending specially crafted HTTP request packets for an arbitrary website. Successful exploits all...
JamRoom <= 3.3.8 Authentication Bypass
GulfTech Security Research July 28, 2008 Vendor : Talldude Networks, LLC URL : http://www.jamroom.net/ Version : Jamroom = 3.3.8 Risk : Authentication Bypass Description: Jamroom is a popular online social media cms used to host artist sites and create music communities. It is vulnerable to a fla...
Mozilla Firefox command line URI handling vulnerability
Overview Mozilla Firefox contains a vulnerability that may allow an attacker to bypass security restrictions by opening specially crafted URIs using the Firefox command line interface. Description Mozilla Firefox can process URIs from its command line interface that can be accessed by users or...