Memory corruption

The Impulse Tracker IT and ScreamTracker 3 S3M modules in INMOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted 1 .IT or 2 .S3M file containing integer values that are used as memory offsets, which triggers memory corruption...

CVE-2007-1922

The Impulse Tracker IT and ScreamTracker 3 S3M modules in INMOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted 1 .IT or 2 .S3M file containing integer values that are used as memory offsets, which triggers memory corruption...

CVE-2007-1922

CVE-2007-1922 affects AOL Nullsoft Winamp 5.33, specifically the IT and S3M modules in IN_MOD.DLL. A crafted .IT or .S3M file containing integer values used as memory offsets can trigger memory corruption, enabling remote attackers to execute arbitrary code. Risk assessment and exact exploitation...

CVE-2007-1922

The Impulse Tracker IT and ScreamTracker 3 S3M modules in INMOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted 1 .IT or 2 .S3M file containing integer values that are used as memory offsets, which triggers memory corruption...

CVE-2006-7159

Directory traversal vulnerability in include/prunetorrents.php in BTI-Tracker 1.3.2 aka btitracker allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action...

CVE-2006-7159

CVE-2006-7159 affects BTI-Tracker 1.3.2 (btitracker). A directory traversal in include/prune_torrents.php via the TORRENTSDIR parameter in a prune action allows remote attackers to delete arbitrary files. This is a file-system traversal vulnerability (no authentication required per the descriptio...

CVE-2006-7159

Directory traversal vulnerability in include/prunetorrents.php in BTI-Tracker 1.3.2 aka btitracker allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action...

Apple QuickTime movie heap buffer overflow vulnerability

Overview The Apple QuickTime player contains a heap buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description Apple QuickTime contains a heap buffer overflow vulnerability. This vulnerability may allow an...

CVE-2006-6460

Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509...

CVE-2006-6460

YourFreeWorld.com Short Url & Url Tracker Script is affected by CVE-2006-6460: an invalid id parameter to login.php leaks the internal path via an error message, exposing sensitive information. The entry notes a possible relation to CVE-2006-2509. Connected sources confirm the affected product an...

CVE-2006-6460

Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509...

CVE-2006-6386

CVE-2006-6386 is a Cross-site Scripting (XSS) vulnerability in Drupal’s CVS management/tracker components (4.7.x-1.0, 4.7.x-2.0, 4.7.0 before 20060807). The flaw allows remote attackers to inject arbitrary web script or HTML via the motivation field on the CVS application page, because the value ...

MODPlug Tracker多个缓冲区溢出漏洞

MODPlug Tracker（也称为OpenMPT）允许用户在基于Windows的PC上创建音乐。 OpenMPT的ReadITProject函数没有过滤ITP文件中的文本字段，允许攻击者覆盖全局变量，执行恶意代码。请注意libmodplug中不支持ITP文件。 soundlib/Loadit.cpp中的漏洞代码： BOOL CSoundFile::ReadITProjectLPCBYTE lpStream, DWORD dwMemLength ... // Song name // name string length...

phpBB User Viewed Posts Tracker模块phpbb_root_path变量远程文件包含漏洞

phpBB是一种用PHP语言实现的基于Web的开放源码论坛程序，使用较为广泛。它支持多种数据库作为后端，如Oracle、MSSQL、MySql、PostGres等等。 phpBB的User Viewed Posts Tracker模块在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 phpBB的User Viewed Posts Tracker模块没有正确地验证phpbbrootpath参数的输入，允许攻击者通过包含本地或外部资源的任意文件导致执行任意PHP代码。漏洞代码如下： includeonce$phpbbrootpath...

GLSA-200610-13 : Cheese Tracker: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200610-13 Cheese Tracker: Buffer Overflow Luigi Auriemma reported that the XM loader of Cheese Tracker contains a buffer overflow vulnerability in the loaderXM::loadintrumentinternal function from loaders/loaderxm.cpp. Impact : An...

CVE-2006-5608

SQL injection vulnerability in Extended Tracker xtracker 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs."...

CVE-2006-5608

SQL injection vulnerability in Extended Tracker xtracker 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs."...

CVE-2006-5608

CVE-2006-5608: SQL injection in Extended Tracker (xtracker) 4.7 for Drupal, before 1.5.2.1, allows remote attackers to execute arbitrary SQL commands via parameters from URLs. Affected component: xtracker for Drupal; root cause: improper handling of URL parameters leading to SQL injection. Exploi...

Cheese Tracker: Buffer Overflow

Background Cheese Tracker is a Qt-based portable Impulse Tracker clone, a music tracker for the CT, IT, XM and S3M file formats. Description Luigi Auriemma reported that the XM loader of Cheese Tracker contains a buffer overflow vulnerability in the loaderXM::loadintrumentinternal function from...

Extended Tracker - SQL Injection

The contributed module Extended Tracker xtracker accepts parameters from URLs and uses those unescaped in SQL queries, allowing malicious users to execute SQL injection attacks. This may result in them gaining administrator privileges. Versions affected Please check the CVS $Id$ fields in the fil...