CVE-2007-5450: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

PT-2007-6486 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Safari on Apple iPod touch and iPhone version 1.1.1 Description: The issue allows user-assisted remote attackers to cause an application crash and enable filesystem browsing by the local user via a certain TIFF file. This can result in a deni...

RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0

Dear all, for your information. ------------------------------------------------------------------------ RUS-CERT Security Announcement 2007-06:01 1380 ================================================ The built-in Mini Switch in Alcatel-Lucent's IP-Touch Telephones under OmniPCX Enterprise 7.0 an...

Design/Logic Flaw

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

CVE-2007-2512

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

CVE-2007-2512

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

CVE-2007-2512

CVE-2007-2512 affects Alcatel-Lucent OmniPCX Enterprise Release 7.0 and later, where the built‑in mini switch on IP-Touch phones is enabled by default. This allows unauthenticated access to the voice VLAN through a daisy‑chained computer system, effectively bypassing 802.1x in some scenarios and ...

CVE-2007-2512: Undefined Security Weakness

Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...

Mozilla Firefox <= 1.5.0.4 Javascript Navigator Object Code Execution PoC

No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...

CVE-2006-3762: Undefined Security Weakness

The Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute arbitrary files via a "file///" URI in the sPath parameter to the Execute function...

CVE-2006-3762

The CVE-2006-3762 entry concerns the Touch Control ActiveX control 2.0.0.55. A remote attacker can read, and possibly execute, arbitrary files by supplying a file:/// URI in the sPath parameter to the Execute function. This indicates a failure in input handling for file paths within the ActiveX c...

CVE-2006-3762

The Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute arbitrary files via a "file///" URI in the sPath parameter to the Execute function...

CVE-2004-1795

Technical details about CVE-2004-1795 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2004-1780

Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...

CVE-2004-1795

Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI...

CVE-2004-1780

CVE-2004-1780 affects the Info Touch Surfnet kiosk. The issue allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts. CVSS v2.0 base score 4.6 (Medium): vectors suggest Local access, Low attack complexity, no authentication, partial impact on co...

CVE-2004-1781

Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMDCREDITCARDCHARGE command...

CVE-2004-1780: Undefined Security Weakness

Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...

CVE-2004-1795: Undefined Security Weakness

Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI...

CVE-2004-1781: Undefined Security Weakness

Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMDCREDITCARDCHARGE command...