EUVD-2010-4319

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

Multiple vulnerabilities in BugTracker.Net

Core Security - CoreLabsMultiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL: http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker Date published: 2010-11-30 Date of last...

Tracker: SpyEye Not Yet Zeus-Like In Stature

The SpyEye Tracker, a new site that hopes to trace the activity of the budding SpyEye Trojan, went live this week and shows the emerging SpyEye botnet to be global in reach, but still much smaller than the Zeus botnet with which it has merged. SpyEye Tracker has already identified 68 malicious...

My Vacation Tracker DLL Hijacking Exploit (svctaglib.dll)

Exploit for windows platform in category local exploits ========================================================= My Vacation Tracker DLL Hijacking Exploit svctaglib.dll ========================================================= / My Vacation Tracker DLL Hijacking Exploit svctaglib.dll Author :...

My Vacation Tracker DLL Hijacking

/ My Vacation Tracker DLL Hijacking Exploit svctaglib.dll Author : anT!-Tr0J4n Greetz : Dev-PoinT.com inj3ct0r.com All Dev-poinT members and my friends Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Software Link:http://www.myvacationtracker.com Tested on: Windows XP sp3 Home :...

Ubuntu Update for libmikmod vulnerabilities USN-995-1

Ubuntu Update for Linux kernel vulnerabilities USN-995-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9951.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for libmikmod vulnerabilities USN-995-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

USN-995-1: libMikMod vulnerabilities

It was discovered that libMikMod incorrectly handled songs with different channel counts. If a user were tricked into opening a crafted song file, an attacker could cause a denial of service. CVE-2007-6720 It was discovered that libMikMod incorrectly handled certain malformed XM files. If a user...

DEBIAN-CVE-2010-3070

Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

Multiple heap-based buffer overflows in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details ar...

Mandriva Update for libmikmod MDVSA-2010:151 (libmikmod)

Check for the Version of libmikmod OpenVAS Vulnerability Test Mandriva Update for libmikmod MDVSA-2010:151 libmikmod Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Linux Security Advisory : libmikmod (MDVSA-2010:151)

A vulnerability has been discovered and corrected in libmikmod : Multiple heap-based buffer overflows might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file CVE-2009-3995. Packages for 2008.0 and 2009.0 are...

libmikmod multiple buffer overflows

Multiple overflows on Impulse Tracker and Ultratracker format parsing...

CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

DEBIAN-CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

DEBIAN-CVE-2010-2546

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

Design/Logic Flaw

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...

Heap overflow

Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...

CVE-2010-2971

loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...