6184 matches found
Supportsoft ActiveX used in Symantec's products buffer overflow
Stack overrun stack buffer overflow...
Symantec Security Advisory SYM07-002 http://www.symantec.com/avcenter/security/Content/2007.02.22.html BID 22564 22 Feb, 2007 Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor Products Including Some Symantec Consumer Products and Automated Support Assistant Revision History...
SupportSoft ActiveX controls contain multiple buffer overflows
Overview The SupportSoft ActiveX controls contain multiple buffer overflow vulnerabilities, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SupportSoft provides multiple ActiveX packages that are used by third party vendors to...
CVE-2006-6490
Multiple buffer overflows in the SupportSoft 1 SmartIssue tgctlsi.dll and 2 ScriptRunner tgctlsr.dll ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HT...
CVE-2006-6490
The CVE-2006-6490 issue affects Symantec/Norton consumer products that ship the SupportSoft ActiveX controls SmartIssue tgctlsi.dll and ScriptRunner tgctlsr.dll. The vulnerability is described as multiple stack/heap buffer overflows in these ActiveX controls, which could allow remote code executi...
CVE-2006-6490: Undefined Security Weakness
Multiple buffer overflows in the SupportSoft 1 SmartIssue tgctlsi.dll and 2 ScriptRunner tgctlsr.dll ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HT...
VERITAS NetBackup bpcd daemon command chaining vulnerability
Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...
VERITAS NetBackup bpcd daemon command chaining vulnerability
Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...
SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-002 Advisory Title: Palm OS Treo Find Feature System Password Bypass Authors: J.R. Wikes, Matt Cooley, & Scott King Release Date: 14-02-2007...
Symantec Veritas NetBackup CONNECT_OPTIONS Request Buffer Overflow (CVE-2006-5822)
Symantec Veritas NetBackup Server is a client/server backup application solution used for performing scheduled automatic backups and on-demand backups requested by users. The vulnerability is due to a boundary error in the NetBackup service. An attacker can exploit this issue by sending a...
Microsoft Word 2003未明代码执行漏洞
Microsoft Word是一款流行的办公文字处理程序。 Microsoft Word 2003存在未明问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 利用Microsoft Word漏洞，可导致在系统上执行任意指令。Symantec命名为Trojan.Mdropper.X。目前没有详细漏洞细节提供。 Microsoft Word 2003 Viewer Microsoft Word 2003 + Microsoft Office 2003 SP1 + Microsoft Office 2003 Microsoft Office 2003 SP2 Microsoft...
Multiple Symantec Web Security vulnerabilities
CPU exhaustion on large file submission. Crossite scripting...
Design/Logic Flaw
The license registering interface in Symantec Web Security SWS before 3.0.1.85 allows attackers to cause a denial of service CPU consumption by submitting a large file...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Symantec Web Security SWS before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 error messages and 2 blocked page messages produced by SWS...
CVE-2007-0563
Multiple cross-site scripting XSS vulnerabilities in Symantec Web Security SWS before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 error messages and 2 blocked page messages produced by SWS...
CVE-2007-0564
The license registering interface in Symantec Web Security SWS before 3.0.1.85 allows attackers to cause a denial of service CPU consumption by submitting a large file...
CVE-2007-0563
Symantec Web Security (SWS) is affected by CVE-2007-0563 due to multiple XSS vulnerabilities in versions prior to 3.0.1.85. The flaws allow remote attackers to inject arbitrary script or HTML via unspecified vectors related to error messages and blocked page messages produced by SWS. OpenVAS and ...
CVE-2007-0563
Multiple cross-site scripting XSS vulnerabilities in Symantec Web Security SWS before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 error messages and 2 blocked page messages produced by SWS...
CVE-2007-0564
Summary: CVE-2007-0564 affects Symantec Web Security (SWS) prior to version 3.0.1.85. The license registering interface can be abused to trigger a denial of service via submitting a large file, causing CPU consumption. Evidence/Details: The NVD entry specifies CPU consumption DoS with large file ...