Microsoft Outlook Mailto URI远程代码执行漏洞（MS08-015）

BUGTRAQ ID: 28147 CVECAN ID: CVE-2008-0110 Microsoft Outlook是Office套件所捆绑的邮件客户端。 Outlook没有正确地验证传送给客户端的mailto URI，成功利用这个漏洞的攻击者可以访问敏感信息或完全控制受影响的系统。 如果用户受骗跟随了特制的mailto URI的话，就可能导致Web浏览器向Outlook传送额外的命令行开关，而这些开关可以修改Outlook的帐号配置。 Microsoft Outlook 2007 Microsoft Outlook 2003 SP3 Microsoft Outlook 2003 S...

EasyGallery <= 5.0tr - Multiple Remote Vulnerabilities

Info: Software: EasyGallery HomePage: http://myiosoft.com Exploit: Multiple Remote Vulnerabilities High Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Verified in localhost with EasyGallery 5.0tr and magicquotes Off + Remote...

CVE-2007-6708

Multiple cross-site request forgery CSRF vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by 1 a Restore Facto...

Microsoft Security Bulletin MS08-015 - Critical Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031)

Microsoft Security Bulletin MS08-015 - Critical Vulnerability in Microsoft Outlook Could Allow Remote Code Execution 949031 Published: March 11, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Office Outlook. Th...

EasyGallery 5.0tr - Multiple Vulnerabilities

EasyGallery 5.0tr - Multiple Vulnerabilities --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ EasyGallery "alert"JosS + Cross Site Scripting: Vuln File: index.php Exploit: http://localhost/PATH/staticpages/easygallery/index.php?help=about&q=XSS...

CVE-2008-0110

Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI...

Code injection

Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI...

CVE-2008-0110

Summary of CVE-2008-0110 (MS Outlook mailto URI handling): A vulnerability in Microsoft Outlook (Office 2000 SP3, XP SP3, 2003 SP2/SP3, and 2007) arises from improper validation of mailto URIs passed from a web browser, enabling a remote attacker to execute arbitrary code and take complete contro...

CVE-2008-0110

Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI...

CVE-2008-1283

Cross-site scripting XSS vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page...

Microsoft Office mailto URI remote code execution

Overview A vulnerability in the way that Microsoft Outlook handles a certain type of hyperlink could allow a remote attacker to execute arbitrary code on the vulnerable system. Description Microsoft Outlook provides a centralized application for managing and organizing e-mail messages, schedules,...

Microsoft Office Outlook mailto URI Handling Code Execution (MS08-015; CVE-2008-0110)

Microsoft Office Outlook is a personal information manager that provides an e-mail application, a calendar and task and contact management.A remote code execution vulnerability has been reported in Microsoft Office Outlook. The vulnerability is due to an error in Microsoft Office Outlook that fai...

CVE-2008-1040

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

Buffer overflow

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

CVE-2008-1040

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

Cups multiple security vulnerabilities

Code execution on URI handling, multiple DoS conditions...

CVE-2008-0980

Multiple cross-site scripting XSS vulnerabilities in Spyce - Python Server Pages PSP 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the url or type parameter to docs/examples/redirect.spy; 2 the x parameter to docs/examples/handlervalidate.spy; 3 the name parameter to...

Debian DSA-1506-1 : iceape - several vulnerabilities

Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the SeaMonkey Internet Suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0412 Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren a...

CVE-2008-0760

Summary: CVE-2008-0760 is a directory traversal vulnerability in SafeNet Sentinel Protection Server <= 7.4.1.0 and Sentinel Keys Server

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : firefox vulnerabilities (USN-576-1)

Various flaws were discovered in the browser and JavaScript engine. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. CVE-2008-0412, CVE-2008-0413 Flaws were discovered in the file upload form control. A malicious website...