AOL Instant Messenger 4.x - Arbitrary File Creation

source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that are sent to a user include an img tag and a data ta...

AOL Instant Messenger 4.x - Arbitrary File Creation

AOL Instant Messenger 4.x - Arbitrary File Creation source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that...

CVE-1999-1431: Undefined Security Weakness

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications such as Word, installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe...

Microsoft Active Movie Control 1.0 - Filetype

source: https://www.securityfocus.com/bid/1221/info The Microsoft Active Movie Control a multimedia ActiveX control will download files of any type specified in the control parameters in an HTML document, regardless of whether or not they are a valid media type. A hostile website, HTML email or...

Microsoft Active Movie Control 1.0 - Filetype

Microsoft Active Movie Control 1.0 - Filetype source: https://www.securityfocus.com/bid/1221/info The Microsoft Active Movie Control a multimedia ActiveX control will download files of any type specified in the control parameters in an HTML document, regardless of whether or not they are a valid...

CVE-1999-0458

The CVE-1999-0458 entry concerns L0phtcrack 2.5, which creates temporary files in the system TEMP directory. The underlying issue is that these temporary files could contain password information, exposing partial confidentiality of credentials. The available connected Red Hat and CVE listing refe...