Linux Kernel iscsi_add_notunderstood_response Heap Buffer Overflow (CVE-2013-2850)

A heap buffer overflow vulnerability has been reported in the Linux Kernel. The vulnerability is in the iscsiaddnotunderstoodresponse function in the iscsitarget driver and is due to the way a notunderstood response is created after processing very long keys. A remote, unauthenticated attacker ca...

Microsoft Windows Remote Desktop Protocol Denial of Service (MS05-041) - High Confidence (CVE-2005-1218)

A vulnerability exists in Microsoft Windows Remote Desktop Protocol RDP. Remote Desktop Protocol RDP lets users create a virtual session on their desktop computers, allowing them to access all the data and applications on their computers. To trigger the vulnerability, an attacker could send a...

Microsoft System Center Operations Manager Cross-Site Scripting (MS13-003; CVE-2013-0009)

A cross-site scripting vulnerability has been reported in Microsoft System Center Operations Manager...

IBM Rational ClearQuest CQOle ActiveX Code Execution (CVE-2012-0708)

A remote code execution vulnerability has been reported in IBM Rational ClearQuest...

Nullsoft Winamp RIFF INFO Record Heap Buffer Overflow (CVE-2011-3834)

A remote code execution vulnerability has been reported in Nullsoft Winamp...

Preemptive Protection against Freefloat FTP Server Invalid Command Buffer Overflow (CVE-2005-0696; CVE-2005-3683)

A buffer overflow vulnerability has been reported in Freefloat FTP Server...

Apple Safari file URL Arbitrary Code Execution (CVE-2011-3230)

A remote code execution vulnerability has been reported in Apple Safari. The vulnerability is due to an error in Apple Safari while handling of file:// URLs. A remote attacker can exploit this vulnerability to execute arbitrary code...

Preemptive Protection against Microsoft Active Directory Certificate Services Cross-Site Scripting (MS11-051; CVE-2011-1264)

A cross-site scripting vulnerability has been reported in Microsoft Active Directory Certificate Services...

Microsoft Excel 4.0 Workbook file detected

A remote code execution vulnerability has been reported in Microsoft Excel. A remote attacker could exploit this vulnerability to execute arbitrary code in an affected system...

Microsoft Host Integration Server snabase.exe Denial of Service (CVE-2011-2007)

A denial of service DoS vulnerability has been reported in Microsoft Host Integration Server HIS. HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging and...

Microsoft Excel SLK File Parsing Code Execution (MS11-045; CVE-2011-1276)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the SLK file format. A remote attacker could trigger this flaw by...

CA Internet Security Suite XMLSecDB ActiveX Insecure File Creation (CVE-2011-1036)

CA Internet Security Suite is a comprehensive home and office security system that protects against viruses, hackers, spam, and other online threats. An insecure file creation vulnerability exists in CA Internet Security Suite. The vulnerability is due to a design weakness in the XMLSecDB.DIParse...

Microsoft WINS Service Failed Response Memory Corruption (MS11-035; CVE-2011-1248)

Windows Internet Naming Service WINS was designed specifically to support NetBIOS over TCP/IP NetBT, and is required for any environment in which users access resources that have NetBIOS names. A remote code execution vulnerability has been discovered in Microsoft WINS. The vulnerability is due t...

Microsoft Windows Kernel LoadKeyboardLayoutEx Code Execution (MS11-034; CVE-2011-1241)

The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been reported in the Windows kernel. The...

IBM Informix Dynamic Server SET ENVIRONMENT Stack Buffer Overflow (CVE-2011-1033)

IBM Informix Dynamic Server is an online transaction processing data server. IBM Informix Dynamic Server functionalities include an implementation of SQL including SQL statements, data types, and system catalog tables that provide information regarding database structures. A stack-based buffer...

Microsoft Office Excel MSO Large SPID Read AV Code Execution (MS10-087; CVE-2010-3336)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse specially crafted Excel files. A remote attacker could trigger this flaw by...

Microsoft Excel REPT Function Integer Overflow (MS08-057; CVE-2008-4019)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formula, and various data sources. The common extension used for Microsoft Excel documents is .xls, .xlsx a...

VERITAS NetBackup Java Authentication Service Format String (CVE-2005-2715)

The Symantec VERITAS NetBackup Server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup clients and a master...

Microsoft Windows Media Player RTSP Use after Free Code Execution (MS10-075; CVE-2010-3225)

A remote code execution vulnerability has been reported in Microsoft Windows Media Player network sharing service. The Network Service account is a built-in account that has more access to resources and objects than members of the Users group. Services that run as the Network Service account acce...

Update Protection against Synology Disk Station FTP Login Web Commands Injection Vulnerability

A remote command injection vulnerability has been discovered in Synology Disk Station. The Synology Disk Station is a product designed for storage purposes of small offices or home users. It supports several terabytes of total storage. A remote attacker may exploit this vulnerability to execute...

Oracle Secure Backup observiced.exe Buffer Overflow (CVE-2010-0072)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allowsfor single point of management of data present on network attached storage NAS devices and distributed hostswhich may have different operating systems. A stack buffer overflow vulnerability...

Adobe Shockwave Player IML32.dll Memory Corruption (APSB10-20; CVE-2010-2864)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. The vulnerability is due t...

Internet Explorer HTML Objects Memory Corruption (MS08-031; CVE-2008-1442)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. There exists a heap buffer overflow...

Microsoft Excel WOpt Record Memory Corruption (MS10-038; CVE-2010-0824)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw ...

Microsoft Office SharePoint Server help.aspx Cross Site Scripting (CVE-2010-0817)

Microsoft Windows SharePoint Services WSS is an add-on component of Windows Server that provides content managament functionality. WSS is based on IIS and ASP.NET technologies, providing a basic portal infrastructure, collaborative editing of documents, document organization, and version control...

IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...

Microsoft Excel EntExU2 Record Memory Corruption (MS10-017; CVE-2010-0257)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw ...

Digium Asterisk SIP sscanf Multiple Denial of Service (CVE-2009-2726)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow (CVE-2008-2541)

CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware, spam, phishing, P2P file sharing and prevents access to known spyware sites. All CA S...

CA Message Queuing Buffer Overflow (CVE-2005-2668)

Computer Associates CA provides numerous product suites that provide network-monitoring functionality, manage network asset discovery, software deployment, and patch management. These capabilities are contained in the CA Unicenter product suites. The numerous components that are provided, contain...

Microsoft Windows Shell Handler URL Validation Code Execution (MS10-007; CVE-2010-0027)

A remote code execution vulnerability has been reported in the Microsoft Windows ShellExecute API function. The Windows user interface provides users with access to a wide variety of objects necessary for running applications and managing the operating system. ShellExecute is part of the Windows...

Microsoft Distributed Transaction Controller Denial of Service (MS05-051; CVE-2005-1979)

The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...

Microsoft Windows Embedded OpenType Font Integer Overflow (MS09-029; CVE-2009-0232)

Embedded OpenType EOT fonts are a compact form of OpenType fonts designed by Microsoft for use as embedded fonts on web pages. These files usually use the extension ".eot". The Embedded OpenType EOT Font Engine is a Microsoft Windows component that enables Windows applications, such as Microsoft...

Microsoft Agent Crafted URL Stack Buffer Overflow (MS07-051; CVE-2007-3040)

The Microsoft Agent ActiveX control, exposes a set of methods and properties that can be used for scripting in HTML pages. There exists a buffer overflow vulnerability in Microsoft Windows Agent application. The flaw is due to wrongfully copying an overly large string to a fixed-size stack buffer...

Oracle Database Server String Conversion Function Buffer Overflow (CVE-2004-1364)

Oracle's implementation of SQL provides several conversion and transformation functions to help database users work with the various data types. Conversion functions can be executed by all authenticated database users. There exists an input validation vulnerability with Oracle database server...

Internet Explorer Malformed Request Header Information Disclosure (MS08-031; CVE-2008-1544)

An information disclosure vulnerability has been reported in the way that Internet Explorer handles certain request headers. The vulnerability is due to an error in Internet Explorer that incorrectly parses a specially crafted request header, allowing a violation of the same origin policy. To...

Trend Micro Control Manager Chunked Overflow (CVE-2005-1929)

The Trend Micro Control Manager product is a centralized outbreak management console. It is meant to consolidate the coordination of outbreak security actions and the management of Trend Micro products and services. The product is a central command center for management of infections or...

Sun Java Plug-in Sandbox Security Bypass (CVE-2004-1029)

The Sun Java plug-in is a component of the Java 2 Runtime Environment. Sun's Java plug-in technology creates a connection between a Web browser and the Java platform. This connection enables Java applets, served from a Web site, to be run within a Web browser in a restricted environment, known as...

Fujitsu SystemcastWizard Lite PXEService UDP Handling Buffer Overflow (CVE-2009-0270)

Fujitsu SystemcastWizard software is one of the management tools included in the Systemwalker Resource Coordinator, which is a provisioning software by Fujitsu to efficiently and reliably operate blade servers. SystemcastWizard can install operating system images remotely and clone them on other...

IIS RSA Authentication Agent for Web Redirect Buffer Overflow (CVE-2005-4734)

The RSA Authentication Agent for Web for Internet Information Services IIS provides protection for selected web pages by securing them with the RSA SecurID authentication mechanism. When a user attempts to access a resource that is secured with the RSA SecurID, the RSA Agent authenticates the use...

MySQL yaSSL SSL Hello Message Buffer Overflow (CVE-2008-0226)

MySQL is an open-source implementation of a relational database management system. MySQL supports the SQL Structured Query Language database query language. The database product allows remote network connections from client applications over the proprietary MySQL network protocol. MySQL Server...

CA BrightStor ARCServe Backup LGServer Authentication Username Overflow (CVE-2007-5003)

Computer Associates BrightStor ARCserve Backup for Laptops and Desktops provides backup and data recovery for remote, mobile and desktop computers. In general, a backup system is comprised of a server and multiple clients, also known as agents. The server establishes, organizes, and controls all ...

Oracle Database Server MDSYS.SDO_LRS Package SQL Injection (CVE-2006-5340)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

SAP MaxDB Remote Arbitrary Commands Execution (CVE-2008-0244)

SAP MaxDB is an open source relational database management system RDBMS developed and supported by SAP AG. MaxDB is targeted for large SAP environments such as mySAP Business Suite and other applications that require enterprise level database functionality. MaxDB is available for the most promine...

Internet Explorer Multiple COM Objects Memory Corruption (MS05-037 MS05-038; CVE-2005-1990; CVE-2005-2087)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technologies. There exists a vulnerability in the way Microsoft Internet Explorer instantiates certain COM objects that ar...

CA Multiple Products DBASVR RPC Server Crafted Pointer Buffer Overflow (CVE-2007-5329)

CA BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases, and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a buffer overflow...

Sophos Anti-Virus CAB File Invalid Folder Count Heap Overflow (CVE-2006-0994)

Sophos Anti-Virus AV is a product that provides virus scanning functionality for desktop and server systems. It can scan files on the local system or files downloaded from the network for known viruses, Trojans, and other malicious programs. The AV product is capable of interpreting numerous...

Preemptive Protection against Microsoft GDI+ PNG Heap Overflow Vulnerability (MS09-062)

A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...

Ipswitch WhatsUp Gold DOS Device HTTP Request Denial of Service (CVE-2004-0799)

WhatsUp is a network management and monitoring application developed by Ipswitch Inc. It has a built-in web server to enable remote access to the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold processes a request that contains a special device nam...

Internet Explorer SetCapture Calls Improper Handling (MS09-019; CVE-2009-1529)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To...