13538 matches found
Adobe Shockwave Player Lnam Chunk Processing Buffer Overflow (APSB10-25; CVE-2010-3655)
A code execution vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due to an error in Adobe Shockwave Player while parsing stringArray structures inside Lman chunks in crafted Director files. A remote attacker can exploit this issue by enticing a user to open a...
Adobe Audition Session File TRKM Stack Buffer Overflow (APSB11-10; CVE-2011-0615)
Adobe Audition formerly Cool Edit Pro is a digital audio workstation from Adobe Systems featuring both a multi-track, non-destructive mix/edit environment and a destructive-approach waveform editing view. A stack buffer overflow exists in Adobe Audition. The vulnerability is due to an error when...
Internet Explorer Handling Layout Memory Corruption (MS11-050; CVE-2011-1254)
A remote code execution vulnerability has been reported in the way that Microsoft IE accesses an object that has not been correctly initialized or has been deleted. Microsoft IE attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way tha...
Internet Explorer Redirect CDL Protocol Memory Corruption (MS11-050; CVE-2011-1262)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to a memory corruption error in Internet Explorer when handling CDL protocol. Successful exploitation of this vulnerability will crash the browser, and may allow execution of arbitrary code on t...
Microsoft .NET Framework Arbitrary Code Execution (MS11-039; CVE-2011-0664)
The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability has been reported in...
Microsoft PowerPoint Techno-color Time Bandit Code Execution (MS11-022; CVE-2011-0655)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. The vulnerability is caus...
Microsoft OpenType CFF Driver Font Data Stack Overflow (MS11-032; CVE-2011-0034)
OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font. A remote code execution vulnerability has been reported in the w...
Oracle GoldenGate Veridata Server XML SOAP Request Buffer Overflow (CVE-2010-4416)
Oracle GoldenGate Veridata is a high-speed, low-impact data comparison solution that identifies and reports on data discrepancies between databases without interrupting ongoing business processes. The application provides details on tables, rows, and columns that are persistently out of sync,...
Update Protection against Multiple Vendors librpc.dll Stack Buffer Overflow
A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. The vulnerability is due to insufficient validation of user input during authentication by the RPC protocol parsing library, librpc.dll, used by the Portmapper service portmap.exe. Successful...
Internet Explorer onCellChange Event Memory Corruption (MS11-003; CVE-2011-0035)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when parsing specially crafted Web content. To trigger this issue, an attacker ma...
Microsoft Kerberos Implementation Spoofing Elevation of Privilege (MS11-013; CVE-2011-0091)
A spoofing vulnerability has been reported in implementations of Kerberos on Windows 7 and Windows Server 2008 R2. Kerberos is a protocol used to mutually authenticate users and services on an open and unsecured network. It allows services to correctly identify the user of a Kerberos ticket witho...
HP OpenView Network Node Manager nnmRptConfig.exe Buffer Overflow (CVE-2011-0268)
The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...
Apple QuickTime FPX Subimage Remote Code Execution (CVE-2010-3801)
Apple QuickTime is a media player application that is capable of playing back numerous multimedia file formats from local file system or network servers. A memory corruption vulnerability has been reported in Apple QuickTime. A remote attacker could exploit this issue via a malformed FPX file...
Microsoft Graphics Filters FlashPix Converter Heap Corruption (MS10-105; CVE-2010-3952)
A remote code execution vulnerability has been discovered in the way that Microsoft Office parses specially crafted FlashPix image files. FlashPix is a bitmapped computer graphics file format where the image is saved in more than one resolution. The vulnerability is due to an error in Microsoft...
Symantec IM Manager IMAdminReportTrendFormRun.asp SQL Injection (CVE-2010-0112)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...
Symantec IM Manager IMAdminScheduleReport.asp SQL Injection (CVE-2010-0112)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. A SQL injection vulnerability has been reported...
CA Multiple Products Alert Notification Server Buffer Overflow (CVE-2007-4620)
Computer Associates, or CA, develop and sell various software to enterprise users. Some CA products, such as Threat Manager, Protection Suites, and BrightStor ARCserve Backup, share a set of common components. One of these common component is Alert Notification Server. This component runs as a...
Adobe Shockwave Director rcsL Chunk Remote Code Execution (APSA10-04; CVE-2010-3653)
Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. An attacker can exploit th...
Microsoft Excel Ghost Record Type Parsing Code Execution (MS10-080; CVE-2010-3242)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
Adobe Shockwave Player IML32.dll XtcL Denial of Service (APSB10-20; CVE-2010-2869)
Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A denial of service vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...
IBM Lotus Notes DOC Attachment Viewer Buffer Overflow (CVE-2007-5544)
Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with email servers over a range of protocols, such as: SMTP, POP, and IMAP. A stack buffer overflow vulnerability exists in the way IBM Lotu...
Digium Asterisk Multiple Products IAX2 Handshake Denial of Service (CVE-2008-1897)
There exists a denial of service vulnerability in multiple Digium Asterisk products. The vulnerability is due to insufficient verification of ACK responses during IAX2 handshakes by the IAX2 protocol. A remote unauthenticated attacker may exploit this vulnerability by sending a crafted message to...
ClamAV CHM File Handling Integer Overflow (CVE-2005-2450)
Clam AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several file formats in order to be able to scan them for viruses. One of such formats is the Microsoft compiled help files, as known as CHM. There...
Apple Safari for Windows and Internet Explorer Combined Code Execution (CVE-2008-2540)
Microsoft Internet Explorer is the most widely used Internet browser. Safari is a web browsing application developed by Apple. A combination of the default download location in Safari and how the Windows desktop handles executables creates a blended threat in which files may be downloaded to a...
Microsoft Excel DBQueryExt Record Memory Pointer Corruption (MS10-038; CVE-2010-1253)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A remote code execution vulnerability has been identified in Microso...
RealNetworks Helix Server NTLM Authentication Heap Overflow (CVE-2010-1317)
Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. A heap-based buffer overflow vulnerability has been reported in RealNetworks Helix Server products. The flaw is due to an error when handling Base64-encoded NTLM Authentication data. A...
HP Power Manager formExportDataLogs Directory Traversal (CVE-2009-4000)
HP Power Manager is a web-based application for managing a HP Uninterruptible Power System UPS. A directory traversal vulnerability has been reported in HP Power Manager. The vulnerability is due to an input validation error while processing parameters sent to a certain form of the web based...
Preemptive Protection against Adobe ColdFusion Multiple Cross-Site Scripting Vulnerabilities (APSB10-11)
Multiple cross-site scripting XSS vulnerabilities have been discovered in Adobe ColdFusion server. Adobe ColdFusion is an application server for developing dynamically generated Web sites. Cross-site scripting occurs when a Web-based application fails to validate user input before returning it to...
Microsoft Excel Column Record Handling Memory Corruption (MS07-002; CVE-2007-0030)
Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...
Gravity GTD rpc.php Malformed objectname Parameter (CVE-2008-5962; CVE-2008-5963)
Gravity GTD is an open source list manager for tracking action items according to the principles of Getting Things Done GTD. There exist multiple vulnerabilities in Gravity GTD. One attack vector could allow remote attackers to conduct directory traversal attacks and possibly read or write...
Microsoft Windows Vista Windows Mail File Execution (MS07-034; CVE-2007-1658)
Microsoft Windows Mail product is an implementation of an email and newsgroup client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and formats. It is the successor to Outlook Express and is included in recent versions of Microsoft Windows...
Microsoft Excel XLSX File Parsing Code Execution (MS10-017; CVE-2010-0263)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...
Apple QuickTime MOV File JVTCompEncodeFrame Heap Overflow (CVE-2007-2295)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...
Apple QuickTime MOV File String Handling Integer Overflow (CVE-2005-2753)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processing the Apple QuickTime movie file format, which is a proprietary format created by Appl...
Microsoft OLE Automation String Manipulation Heap Overflow (MS07-043; CVE-2007-2224)
Microsoft Object linking and embedding OLE Automation is the formal inter-process communication mechanism based on Component Object Model COM. It provides an infrastructure whereby applications called automation controllers can access and manipulate shared automation objects that are exported by...
Subversion svn Protocol String Parsing (CVE-2004-0413)
Subversion is a revision control system that handles svn protocol requests. A specially crafted svn request could cause svnserve, the daemon that handles svn protocol requests, to allocate insufficient heap memory and overflow the heap. It is possible for a malicious attacker to run arbitrary cod...
HP OpenView Network Node Manager ovalarmsrv Integer Overflow (CVE-2008-2438)
HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, for example: OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. An integer overflow...
BlackBerry Application Web Loader ActiveX Control Buffer Overflow (CVE-2009-0305)
The BlackBerry Application Web Loader allows to download the BlackBerry applications from a web server using a browser supporting ActiveX controls onto a handheld device. It makes deployment of new applications and updates easier for developers. A user can load the application to their BlackBerry...
Apple iTunes AAC File Handling Integer Overflow (CVE-2006-1467)
Apple iTunes is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video and audio formats. One of the formats that the player is capable of processing is the protected advanced audio coding AAC media fil...
Qualcomm WorldMail IMAP Server Directory Traversal (CVE-2005-3189)
The Qualcomm WorldMail product is an email and messaging server. The product is designed for small to large enterprise environments. WorldMail provides, amongst other services, an IMAP server which allows email retrieval. There exists a directory traversal vulnerability in Qualcomm WorldMail IMAP...
Trend Micro OfficeScan Multiple CGI Modules Form Processing Buffer Overflow (CVE-2008-3862)
Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on nodes of an enterprise network. The product is a central command center for...
Sybase EAServer WebConsole Buffer Overflow (CVE-2005-2297)
Sybase EAServer is a web service application server suite. The software provides a web-based management console to allow a remote user using a web browser to perform database administration tasks. The communication between the client and the web-based management console is encapsulated in the HTT...
Microsoft SMB Endless Loop Denial of Service (CVE-2009-3676)
The SMB Protocol is a network file sharing protocol. A denial of service vulnerability has been reported in the way that Microsoft Server Message Block SMB protocol software handles specially crafted SMB packets. The vulnerability is due to an error in the Microsoft Server Message Block SMB...
CVS Max-dotdot Protocol Command Integer Overflow (CVE-2004-0417)
Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...
Microsoft .NET Framework Arbitrary Memory Modification (MS09-061; CVE-2009-2497)
The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...
CA BrightStor ARCserve Backup Message Engine Opcode 117 Buffer Overflow (CVE-2007-0169)
Computer Associates BrightStor ARCserve Backup and Business Protection Suite families of software products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including backup and restore, dat...
Internet Explorer IsComponentInstalled Buffer Overflow (CVE-2006-1016)
The Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, scripting languages and interpretation of various other popular Internet specifications. There exists a buffer overflow vulnerability in the IsComponentInstalled function...
Update Protection against Oracle Application Server 10g OPMN Service Format String Vulnerability
A vulnerability was reported in Oracle Application Server, a multi-platform solution for developing and deploying enterprise applications and web sites. The flaw is due to insufficient validation of the URI part of HTTP requests. Remote attackers could exploit this vulnerability by sending a...
Update Protection against AXIS Communications Camera Control image_pan_tilt Buffer Overflow
A buffer overflow vulnerability was reported in the ActiveX Camera Control by AXIS Communications. A remote image/video monitoring solution, AXIS Camera Control is an ActiveX control with multiple functions that can be used over HTTP. The vulnerability is due to a boundary error that can be...
Internet Explorer ActiveX Navigate Handling Code Execution (MS08-073; CVE-2008-4258)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Internet Explorer that fails to properly validate parameters made during a method call in the...