Microsoft Internet Explorer HTML Object Use After Free - Ver2 (CVE-2010-0248)

A use-after-free vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker could trigger this vulnerability by accessing an object that was...

Microsoft Internet Explorer mergeAttribues Property Handling Memory Corruption - Ver2 (CVE-2007-0945)

Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...

CA BrightStor Arcserve Media Server Stack Buffer Overflow - Ver2 (CVE-2007-2139)

A buffer overflow vulnerability has been reported in CA BrightStor ARCserve Media Server. The vulnerability is due to insufficient boundary checking when processing crafted strings supplied in SUN RPC requests. Successful exploitation of this vulnerability could allow a remote attacker to execute...

Orbit Downloader Long URL Stack Buffer Overflow - Ver2 (CVE-2009-0187)

Orbit Downloader, developed by Orbit Downloader Team, is a graphical download manager for Microsoft Windows operating system. Orbit Downloader works with all major browsers like Opera, Mozilla Firefox, Microsoft Internet Explorer, Maxthon, and Netscape. A buffer overflow vulnerability exists in...

Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)

A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Microsoft Access 1.x database files .mdb. This vulnerability can be exploited by causing an application that uses the...

Microsoft Windows HTTP.sys Denial of Service (MS13-039) - Improved Performance (CVE-2013-1305)

A denial of service vulnerability has been reported in Windows Server 2012 and Windows 8. The vulnerability is due to an error in the way HTTP.sys handles a malicious HTTP header. Successful exploitation would result in a denial of service condition...

Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3144)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...

IBM SPSS SamplePower c1sizer ActiveX Control Buffer Overflow (CVE-2012-5946)

A heap-based buffer overflow vulnerability exists in IBM SPSS SamplePower...

Siemens SIMATIC WinCC RegReader ActiveX Control Buffer Overflow (CVE-2013-0674)

A stack-based buffer overflow vulnerability has been reported in Siemens SIMATIC WinCC...

Oracle MySQL for Windows Elevation of Privilege (CVE-2012-5613)

A remote code execution vulnerability has been reported in Oracle MySQL servers...

Microsoft Silverlight Pointer Dereference Memory Corruption (MS13-022; CVE-2013-0074; CVE-2013-3896)

A pointer dereference vulnerability has been reported in Microsoft Silverlight. This vulnerability is due to insufficient verification of a pointer when rendering an HTML object. Remote attackers can exploit this vulnerability by enticing target users to visit a malicious web page, potentially...

HP LeftHand Virtual SAN Appliance hydra Ping Processing Buffer Overflow (CVE-2012-3285)

A stack buffer overflow vulnerability exists in HP LeftHand Virtual SAN Appliance. The vulnerability is due to insufficient input validation on target hostname or IP address of a Ping request sent to the hydra service which listens by default on port 13838/TCP. A remote attacker can exploit this...

VideoLAN VLC Media Player PNG Code Execution - Improved Performance (CVE-2012-5470)

A code execution vulnerability has been reported in VLC Media Player. The vulnerability is due to an input validation error when handling certain PNG files. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted PNG file with a vulnerable version of VLC...

Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024; CVE-2013-0080)

An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint handles specially crafted URLs containing malicious JavaScript elements. A remote attacker may exploit this issue by...

Novell GroupWise HTTP Interfaces Arbitrary File Retrieval (CVE-2012-0419)

A directory traversal vulnerability has been reported in the HTTP interfaces of Novell GroupWise Post Office Agent, Message, Transfer Agent and Internet Agent. The vulnerability is due to a failure to sanitize the request URI for directory traversal characters. A remote unauthenticated attacker c...

Internet Explorer SLayoutRun Use After Free (MS13-009; CVE-2013-0025)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Cisco Prime LAN Management Solution Remote Command Execution (CVE-2012-6392)

A remote command execution vulnerability exists in Cisco Prime LAN Management Solution. The vulnerability is due to use of non encrypted connection with the server. A successful exploitation would allow the attacker to execute commands, and send files...

Novell File Reporter SRS Arbitrary File Retrieval (CVE-2012-4957)

A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the affected service. Successful exploitation could result in arbitra...

Apple QuickTime TeXML Transform Attribute Parsing Buffer Overflow (CVE-2012-0663)

A stack buffer overflow vulnerability has been reported in Apple QuickTime...

RKD Software ActiveX Control Remote Stack Buffer Overflow (CVE-2007-3435)

A Stack buffer overflow vulnerability has been reported in RKD Software Barcode Application. The vulnerability is due to a boundary error within the ABarCode ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially...

HP Intelligent Management Center tftpserver.exe Remote Code Execution (CVE-2011-1851)

A remote code execution vulnerability has been reported in HP Intelligent Management Center. The vulnerability is due to improper verification of the destination buffer's size while handling the transfer mode field within the tftpserver.exe component. A remote attacker could exploit this...

Microsoft WINS Local Elevation of Privilege (MS11-070; CVE-2011-1984)

An elevation of privilege vulnerability has been reported in Microsoft WINS. A local attacker could exploit this vulnerability to execute arbitrary code in an affected local system. The vulnerability is due to an error in the way WINS server processes a sequence of specially crafted packets...

Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow (CVE-2010-3974; CVE-2010-4701)

A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...

Adobe Photoshop CS5 Insecure Library Loading Code Execution (APSB10-30; CVE-2010-3127)

Adobe Photoshop CS5 is a graphics editing program that features a 3D engine. A library-loading vulnerability has been identified in Adobe Photoshop CS5. This vulnerability is due to the application insecurely loading certain librairies from the current working directory, which could allow attacke...

Microsoft Internet Explorer HTML Time Element Memory Corruption (MS10-090; CVE-2010-3346)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...

IBM Informix Dynamic Server DBINFO Stack Buffer Overflow (CVE-2010-4069)

Informix is a family of relational database management system RDBMS products by IBM. IBM Informix Dynamic Server is an online transaction processing data server. A stack buffer overflow exists in IBM Informix Dynamic Server Database. The vulnerability is caused by an insufficient bounds checking ...

Firebird Database Server Username Handling Buffer Overflow (CVE-2008-0467)

Firebird sometimes called FirebirdSQL is a relational database management system offering many ANSI SQL-2003 features. It runs on Linux, Windows, and a variety of Unix platforms. Started as a fork of Borland's open source release of InterBase, the Firebird codebase is maintained by the Firebird...

Microsoft Internet Explorer MSHTML Uninitialized Memory Corruption (MS10-071; CVE-2010-3331)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. To trigger this issue, ...

Internet Explorer Location Uninitialized Memory Corruption (MS10-053; CVE-2010-2556)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...

Sun Java Runtime Environment JAR File Processing Stack Buffer Overflow (CVE-2008-5354)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...

HP OpenView Client Configuration Manager Radia Notify Code Execution (CVE-2006-5782)

An authentication weakness vulnerability exists in the Radia Notify Daemon component of HP OpenView Client Configuration Manager. The flaw is created by improper handling of user supplied data passed to the affected Radia Notify Daemon on TCP port 3465. By sending a crafted message, the attacker...

HP OpenView Network Node Manager ovet_demandpoll.exe Code Execution (CVE-2010-1550)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A remote code execution...

Microsoft ATL Uninitialized Object Code Execution (MS09-037; CVE-2009-0901)

Microsoft Active Template Library ATL is a set of template-based C++ classes developed to help simplify the programming of Component Object Model COM objects. The COM support in Microsoft Visual C++ allows developers to create a variety of COM objects, OLE Automation servers, and ActiveX controls...

HP OpenView Storage Data Protector Cell Manager Heap Buffer Overflow (CVE-2007-2281)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...

Adobe Pagemaker MAIPM6.DLL Long Font Name Buffer Overflow (CVE-2007-5169)

Adobe PageMaker software is a page layout program. Adobe PageMaker native documents have file extension PMD. The data is stored using the Microsoft's proprietary Compound Document Object format, also called the OLE 2.0 docfile format. In this format, objects are stored inside streams. A directory...

MediaWiki Parser Script Insertion (CVE-2006-2611)

A Wiki is generally referred to a collaborative online system that allows many users to easily contribute content by creating web pages that have a common look and feel and that may be changed and revised at any time. MediaWiki is a popular implementation of the Wiki system. It uses a number of P...

Microsoft DirectShow AVI Parser Heap Overflow (MS10-013; CVE-2010-0250)

Microsoft DirectShow is used for streaming media on Microsoft Windows operating systems. It is used for high-quality capture and playback of multimedia streams. Audio Video Interleave AVI is a file type that is used with applications that capture, edit, and play back audio-video sequences.A remot...

Microsoft PowerPoint LinkedSlideAtom Heap Overflow (MS10-004; CVE-2010-0030)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a heap overflow in Microsoft PowerPoint LinkedSlideAtom when processing malicious PowerPoint...

Microsoft Internet Explorer Cross Domain Information Disclosure (MS06-042; CVE-2006-3280)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. Internet Explorer has numerous built-in mechanisms that enforce security policies which are...

Internet Explorer Event Operations HTML Object Memory Corruption (MS10-002; CVE-2010-0248)

Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigge...

Novell iPrint Client ActiveX Control Multiple Buffer Overflows (CVE-2008-2431)

Novell iPrint Client is an application that allows users to install and manage printers, or submit print job from a web browser. Novell iPrint Client is bundled with a set of ActiveX controls that implement various functions. There exist multiple buffer overflow vulnerabilities in Novell iPrint...

HP OpenView Network Node Manager HTTP Handling Buffer Overflow (CVE-2008-1697)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, for example: OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. There exists a buffer...

Adobe JRun 4 Server File Disclosure (CVE-2004-0928)

Adobe JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including IIS and Apache. With IIS, JRun can be registered t...

Microsoft SQL Server INSERT Statement Buffer Overflow (MS08-040; CVE-2008-0106)

Microsoft SQL Server is a popular relational database management system RDBMS. Microsoft SQL Server can be administered programmatically using system stored procedures, or through Distributed Management Objects DMO. Its primary query language is Transact-SQL, an implementation of the ANSI/ISO...

HP StorageWorks Storage Mirroring Double Take Service Code Execution (CVE-2008-1661)

HP StorageWorks is a collection of storage solutions from Hewlett Packard. These solutions include online storage, nearline storage, storage networking , archiving, and storage software. One of the storage software solutions is the Storage Mirroring Software. HP StorageWorks Storage Mirroring...

IBM WebSphere Application Server Cross Site Scripting (CVE-2009-2742)

The IBM WebSphere Application Server is a Java 2 Enterprise Edition J2EE and Web Services-based application server. The software is made available for various vendor operating systems. It comprises of several Java-based tools that allow users to create and manage sophisticated business web sites...

Ipswitch WhatsUp Gold DOS Device HTTP Request Denial of Service (CVE-2004-0799)

WhatsUp is a network management and monitoring application developed by Ipswitch Inc. It has a built-in web server to enable remote access to the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold processes a request that contains a special device nam...

Cisco Secure Access Control Server UCP Application Buffer Overflow (CVE-2008-0532)

Cisco Secure Access Control Server provides authentication, authorization, and accounting AAA services to network devices that control client access to the network. Such devices include network access servers, PIX firewalls, wireless access points, routers and switches. A buffer overflow...

Microsoft Windows AVI File Data Validation Integer Overflow (MS09-038; CVE-2009-1546)

Audio Video Interleave AVI is a special case of Resource Interchange File Format RIFF. This file type used with applications that capture, edit, and play back audio-video sequences. The vulnerability is due to an error in the Windows component responsible for processing AVI files that does not...

Adobe Shockwave Player Pointer Memory Overwrite (APSB09-08; CVE-2009-1860)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory overwrite vulnerability has been identified in Adobe Shockwave Player.The vulnerability is due to ...