VNC Multiple Integer Overflows

1. Advisory Information Title: VNC Multiple Integer Overflows Advisory ID: CORE-2008-1009 Advisory URL:http://www.coresecurity.com/core-labs/advisories/vnc-integer-overflows Date published: 2009-02-03 Date of last update: 2009-02-03 Vendors contacted: UltraVNC, TightVNC Release mode: Coordinated...

Amaya Web Editor XML and HTML parser Vulnerabilities

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser...

MW6 Technologies Barcode ActiveX Buffer Overflow Vulnerability

This host is installed with MW6 Technologies Barcode ActiveX and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodmw6barcodebofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ MW6 Technologies Barcode ActiveX Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright:...

CORE-2008-1211: Amaya web editor XML and HTML parser vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser vulnerabilities Advisory ID: CORE-2008-1211...

Update Protection against MW6 Technologies Barcode.dll ActiveX Control Buffer Overflow

A buffer overflow vulnerability was reported in Barocade, a software provided by MW6 Technologies. The vulnerability is due to a boundary error while processing user input. A remote attacker can exploit this vulnerability by convincing the user to open a crafted html file. Successful exploitation...

Amaya Web Editor 11.0 - XML HTML Parser

Amaya Web Editor 11.0 - XML HTML Parser -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser...

CESA-2009-001 - rev 1 Linux syscall interception technologies partial bypass

CESA-2009-001 - rev 1 See all my vulnerabilities at http://scary.beasts.org/security Blog if you want to subscribe to new findings is at http://scarybeastsecurity.blogspot.com/ Linux syscall interception technologies partial bypass Programs affected: Probably many; for example systrace with ptrac...

Amaya Web Editor 11.0 - XML / HTML Parser

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Amaya web editor XML and HTML parser vulnerabilities 1. Advisory Information Title: Amaya web editor XML and HTML parser vulnerabilities Advisory ID: CORE-2008-1211...

Heap overflow

Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control Barcode.MW6Barcode.1, Barcode.dll 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property...

CVE-2009-0298

CVE-2009-0298 describes a heap-based buffer overflow in the MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) version 3.0.0.1. The overflow is triggered by a long Supplement property and allows remote attackers to execute arbitrary code. Multiple sources confirm the vul...

CVE-2009-0298: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control Barcode.MW6Barcode.1, Barcode.dll 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property...

CORE-2008-1128: Openfire multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Openfire multiple vulnerabilities 1. Advisory Information Title: Openfire multiple vulnerabilities Advisory ID: CORE-2008-1128 Advisory URL:...

Openfire multiple vulnerabilities

Openfire multiple vulnerabilities 1. Advisory Information Title: Openfire multiple vulnerabilities Advisory ID: CORE-2008-1128 Advisory URL: Date published: 2009-01-08 Date of last update: 2009-01-07 Vendors contacted: Jive Software Release mode: Coordinated release 2. Vulnerability Information...

openfire -- multiple vulnerabilities

Core Security Technologies reports: Multiple cross-site scripting vulnerabilities have been found which may lead to arbitrary remote code execution on the server running the application due to unauthorized upload of Java plugin code...

PT-2009-24: ELDORADO CMS Multiple Vulnerabilities

ELDORADO CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

PT-2009-11: SlySoft Multiple Products ElbyCDIO.sys Denial of Service

Vulnerability Description Positive Technologies Research Team has discovered multiple memory corruption vulnerabilities in SlySoft products. The IOCTL handler in ElbyCDIO.sys 6.0.2.0 and earlier, shipped with AnyDVD, Virtual CloneDrive, CloneDVD and CloneCD, uses the METHODNEITHER communication...

PT-2009-41: Multiple vulnerabilities in Kayako Support Suite

Vulnerability Description Positive Technologies Research Team discovered several Installation Path Disclosure vulnerabilities in Kayako Support Suite. The application uses a vulnerable PHP function unserialize, which allows an attacker to disclose the product installation path. In addition, there...

PT-2009-22: EXcms Root directory disclosure vulnerability

EXcms is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

PT-2009-09: Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities

Vulnerability Description Positive Technologies Research Team has discovered multiple priviliege escalation vulnerabilities in Trend Micro products. The IOCTL handler in tmactmon.sys uses the METHODNEITHER communication method for IOCTLs and does not properly validate buffer data associated with...

PT-2009-05: CA Internet Security Suite Denial of Service Vulnerability

Positive Technologies Research Team has discovered a denial of service DoS vulnerability in CA Internet Security Suite. The IOCTL handler in vetmonnt.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Solution Install latest...