ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability

ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-005.html January 16, 2007 -- CVE ID: CVE-2007-0243 -- Affected Vendor: Sun Microsystems -- Affected Products: JDK and JRE 5.0 Update 9 and earlier all platforms SD...

ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability

ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-002.html January 11, 2007 -- CVE ID: CVE-2007-0168 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 BrightStor ARCser...

ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability

ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-004.html January 11, 2007 -- CVE ID: CVE-2007-0169 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 BrightStor...

ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerability

ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-003.html January 11, 2007 -- CVE ID: CVE-2007-0169 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 BrightStor...

ZDI-07-001: QUALCOMM Eudora WorldMail Remote Management Heap Overflow Vulnerability

ZDI-07-001: QUALCOMM Eudora WorldMail Remote Management Heap Overflow http://www.zerodayinitiative.com/advisories/ZDI-07-001.html January 5, 2007 -- CVE ID: CVE-2006-6336 -- Affected Vendor: QUALCOMM -- Affected Products: Eudora WorldMail 3.1.x Mail Management Server -- TippingPointTM IPS Custome...

[Full-disclosure] ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability

ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-054.html December 22, 2006 -- CVE ID: CVE-2006-6425 -- Affected Vendor: Novell -- Affected Products: Novell NetMail 3.5.2 -- TippingPointTM IPS Customer Protection: TippingPoint...

[Full-disclosure] ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability

ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-053.html December 22, 2006 -- CVE ID: CVE-2006-6424 -- Affected Vendor: Novell -- Affected Products: Novell NetMail 3.5.2 -- TippingPointTM IPS Customer Protection:...

[Full-disclosure] ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability

ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-052.html December 22, 2006 -- CVE ID: CVE-2006-6424 -- Affected Vendor: Novell -- Affected Products: Novell NetMail 3.5.2 -- TippingPointTM IPS Customer Protection: TippingPoint I...

[Full-disclosure] ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability

ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-051.html December 19, 2006 -- CVE ID: CVE-2006-6504 -- Affected Vendor: Mozilla -- Affected Products: Mozilla Firefox 2.0.0.0 Mozilla Firefox 1.5.0.4 - 1.5.0.8 --...

Mozilla Foundation Security Advisory 2006-73

Mozilla Foundation Security Advisory 2006-73 Title: Mozilla SVG Processing Remote Code Execution Impact: Critical Announced: December 19, 2006 Reporter: TippingPoint and the Zero Day Initiative Products: Firefox 1.5.0.4, SeaMonkey Fixed in: Firefox 2.0.0.1 Firefox 1.5.0.9 SeaMonkey 1.0.7...

Novell NetWare Client for Windows OpenPrinter() function vulnerable to buffer overflow

Overview A vulnerability exists in the Novell NetWare client that could allow a remote attacker to execute arbitrary code on an affected system. Description NetWare is a network operating system produced and maintained by Novell. Novell provides NetWare clients for Microsoft Windows and Linux...

ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability

ZDI-06-050: Symantec Veritas NetBackup CONNECTOPTIONS Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-050.html December 13, 2006 -- CVE ID: CVE-2006-5822 -- Affected Vendor: Symantec -- Affected Products: Veritas NetBackup 6.0 MP4 Veritas NetBackup 5.1 MP6 Veritas...

ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability

ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-049.html December 13, 2006 -- CVE ID: CVE-2006-6222 -- Affected Vendor: Symantec -- Affected Products: Veritas NetBackup 6.0 MP4 Veritas NetBackup 5.1 MP6 Veritas...

ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability

ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-045.html December 12, 2006 -- CVE ID: CVE-2006-6335 -- Affected Vendor: Sophos -- Affected Products: All versions of Sophos Anti-Virus v2.40 scanning engine --...

[Full-disclosure] ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability

ZDI-06-048: Microsoft Internet Explorer normalize Function Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-048.html December 12, 2006 -- CVE ID: CVE-2006-5581 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 -- TippingPointTM IPS Customer...

ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability

ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-046.html December 12, 2006 -- CVE ID: CVE-2006-6335 -- Affected Vendor: Sophos -- Affected Products: All versions of Sophos Anti-Virus v2.40 scanning engine --...

Microsoft Security Advisory (929433) Vulnerability in Microsoft Word Could Allow Remote Code Execution

Microsoft Security Advisory 929433 Vulnerability in Microsoft Word Could Allow Remote Code Execution Published: December 5, 2006 Top of sectionTop of section Microsoft is investigating a new report of limited “zero-day” attacks using a vulnerability in Microsoft Word 2000, Microsoft Word 2002,...

ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability

ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-043.html November 29, 2006 -- CVE ID: CVE-2006-5854 -- Affected Vendor: Novell -- Affected Products: Novell Netware Client 4.91 Novell Netware Client 4.91 SP1 Novell...

ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability

ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-040.html November 14, 2006 -- CVE ID: CVE-2006-5198 -- Affected Vendor: WinZip -- Affected Products: WinZip 10.0 pre build 7245 -- TippingPointTM IPS Customer...

[Full-disclosure] ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability

ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-041.html November 14, 2006 -- CVE ID: CVE-2006-4687 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 -- TippingPointTM IPS Customer...