13538 matches found
Microsoft IIS ASP Engine HTMLEncode Buffer Overflow - Ver2 (CVE-2008-0075)
A buffer overflow vulnerability has been reported in the Microsoft IIS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CA BrightStor Arcserve Media Server Stack Buffer Overflow - Ver2 (CVE-2007-2139)
A buffer overflow vulnerability has been reported in CA BrightStor ARCserve Media Server. The vulnerability is due to insufficient boundary checking when processing crafted strings supplied in SUN RPC requests. Successful exploitation of this vulnerability could allow a remote attacker to execute...
Microsoft Internet Explorer mergeAttribues Property Handling Memory Corruption - Ver2 (CVE-2007-0945)
Microsoft Internet Explorer is the most widely used Internet browser. Multiple remote code execution vulnerabilities have been reported in Microsoft Internet Explorer. The vulnerabilities are due to several memory corruption errors in Microsoft Internet Explorer when instantiating the vulnerable...
Comet WebFileManager CheckUpload.php Language Parameter PHP Code Execution - Ver2 (CVE-2006-4077)
A code execution vulnerability has been reported in Vincenzo Valvano Comet WebFileManager CWFM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Orbit Downloader Long URL Stack Buffer Overflow - Ver2 (CVE-2009-0187)
Orbit Downloader, developed by Orbit Downloader Team, is a graphical download manager for Microsoft Windows operating system. Orbit Downloader works with all major browsers like Opera, Mozilla Firefox, Microsoft Internet Explorer, Maxthon, and Netscape. A buffer overflow vulnerability exists in...
WellinTech KingView ActiveX Control Heap Buffer Overflow Remote Code Execution (CVE-2011-3142)
A stack-based buffer overflow vulnerability has been reported in WellinTech KingView ActiveX control. The vulnerability is due to failure to perform adequate boundary checks on user-supplied input. A remote attacker can exploit this vulnerability by sending via a long second argument to the...
Apple QuickTime MJPEG Frame stsd Atom Heap Overflow (CVE-2013-1020)
A heap overflow vulnerability exists in Apple QuickTime...
Novell ZENworks Mobile Management DUSAP.php Code Execution (CVE-2013-1082)
A code execution vulnerability has been reported in Novell's ZENworks Mobile Management system...
Microsoft Windows HTTP.sys Denial of Service (MS13-039) - Improved Performance (CVE-2013-1305)
A denial of service vulnerability has been reported in Windows Server 2012 and Windows 8. The vulnerability is due to an error in the way HTTP.sys handles a malicious HTTP header. Successful exploitation would result in a denial of service condition...
Microsoft Internet Explorer Memory Corruption (MS13-055; CVE-2013-3144)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
HP Intelligent Management Center mibFileUpload Servlet Arbitrary File Upload (CVE-2012-5201)
An arbitrary file upload vulnerability exists in HP Intelligent Management Center...
IBM SPSS SamplePower c1sizer ActiveX Control Buffer Overflow (CVE-2012-5946)
A heap-based buffer overflow vulnerability exists in IBM SPSS SamplePower...
Siemens SIMATIC WinCC RegReader ActiveX Control Buffer Overflow (CVE-2013-0674)
A stack-based buffer overflow vulnerability has been reported in Siemens SIMATIC WinCC...
Corel WordPerfect Document Processing Buffer Overflow (CVE-2012-4900)
A heap memory corruption vulnerability has been reported in Corel WordPerfect...
Microsoft HTML Sanitization Cross Site Scripting (MS13-035) - High Confidence (CVE-2013-1289)
A cross-site scripting vulnerability has been reported in multiple Microsoft products. The flaw is due to the way that the applications sanitize HTML. Remote attackers can exploit this vulnerability by submitting crafted HTML to the vulnerable server that uses the HTML Sanitization library, and...
Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)
A heap buffer overflow vulnerability has been reported in Adobe Photoshop CS6. The vulnerability is due to an error while handling certain chunks within a specially crafted PNG file. A remote attacker can exploit this vulnerability by enticing a user to open a malicious PNG file. Successful...
HP LeftHand Virtual SAN Appliance hydra Ping Processing Buffer Overflow (CVE-2012-3285)
A stack buffer overflow vulnerability exists in HP LeftHand Virtual SAN Appliance. The vulnerability is due to insufficient input validation on target hostname or IP address of a Ping request sent to the hydra service which listens by default on port 13838/TCP. A remote attacker can exploit this...
Novell File Reporter SRS Arbitrary File Retrieval (CVE-2012-4957)
A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the affected service. Successful exploitation could result in arbitra...
Microsoft XML Core Services Remote Code Execution (KB2719615; CVE-2012-1889)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer...
EMC NetWorker nsrindexd.exe Buffer Overflow (CVE-2012-0395)
A buffer overflow vulnerability has been reported in EMC NetWorker...
RKD Software ActiveX Control Remote Stack Buffer Overflow (CVE-2007-3435)
A Stack buffer overflow vulnerability has been reported in RKD Software Barcode Application. The vulnerability is due to a boundary error within the ABarCode ActiveX control while handling a certain method. A remote attacker could exploit this vulnerability by enticing a user to open a specially...
HP Intelligent Management Center tftpserver.exe Remote Code Execution (CVE-2011-1851)
A remote code execution vulnerability has been reported in HP Intelligent Management Center. The vulnerability is due to improper verification of the destination buffer's size while handling the transfer mode field within the tftpserver.exe component. A remote attacker could exploit this...
Preemptive Protection against Freefloat FTP Server Invalid Command Buffer Overflow (CVE-2005-0696; CVE-2005-3683)
A buffer overflow vulnerability has been reported in Freefloat FTP Server...
Microsoft Office Web Components URL Parsing Buffer Overflow (MS08-017; CVE-2006-4695)
A buffer overflow vulnerability has been reported in Microsoft Office Web Components. The vulnerability is due to improper handling of certain URLs. A remote attacker may exploit this vulnerability by enticing a target user to visit a malicious web-page. Successful exploitation would allow an...
CA Internet Security Suite XMLSecDB ActiveX Insecure File Creation (CVE-2011-1036)
CA Internet Security Suite is a comprehensive home and office security system that protects against viruses, hackers, spam, and other online threats. An insecure file creation vulnerability exists in CA Internet Security Suite. The vulnerability is due to a design weakness in the XMLSecDB.DIParse...
Microsoft WINS Service Failed Response Memory Corruption (MS11-035; CVE-2011-1248)
Windows Internet Naming Service WINS was designed specifically to support NetBIOS over TCP/IP NetBT, and is required for any environment in which users access resources that have NetBIOS names. A remote code execution vulnerability has been discovered in Microsoft WINS. The vulnerability is due t...
Microsoft Windows Kernel LoadKeyboardLayoutEx Code Execution (MS11-034; CVE-2011-1241)
The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. An elevation of privilege vulnerability has been reported in the Windows kernel. The...
IBM Informix Dynamic Server SET ENVIRONMENT Stack Buffer Overflow (CVE-2011-1033)
IBM Informix Dynamic Server is an online transaction processing data server. IBM Informix Dynamic Server functionalities include an implementation of SQL including SQL statements, data types, and system catalog tables that provide information regarding database structures. A stack-based buffer...
Adobe Photoshop CS5 Insecure Library Loading Code Execution (APSB10-30; CVE-2010-3127)
Adobe Photoshop CS5 is a graphics editing program that features a 3D engine. A library-loading vulnerability has been identified in Adobe Photoshop CS5. This vulnerability is due to the application insecurely loading certain librairies from the current working directory, which could allow attacke...
Microsoft Internet Explorer HTML Time Element Memory Corruption (MS10-090; CVE-2010-3346)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...
Microsoft Office Excel MSO Large SPID Read AV Code Execution (MS10-087; CVE-2010-3336)
Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse specially crafted Excel files. A remote attacker could trigger this flaw by...
Microsoft Excel REPT Function Integer Overflow (MS08-057; CVE-2008-4019)
Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formula, and various data sources. The common extension used for Microsoft Excel documents is .xls, .xlsx a...
Microsoft Internet Explorer MSHTML Uninitialized Memory Corruption (MS10-071; CVE-2010-3331)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted when a document in an HTML format is opened in Microsoft Word. To trigger this issue, ...
Microsoft Windows Media Player RTSP Use after Free Code Execution (MS10-075; CVE-2010-3225)
A remote code execution vulnerability has been reported in Microsoft Windows Media Player network sharing service. The Network Service account is a built-in account that has more access to resources and objects than members of the Users group. Services that run as the Network Service account acce...
Apple QuickTime QTPlugin.ocx _Marshaled_pUnk Code Execution (CVE-2010-1818)
QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. Upon installation, Apple QuickTime also installs a web browser plugin, QTPlugin.ocx. A remote code execution vulnerability has been...
Oracle Secure Backup observiced.exe Buffer Overflow (CVE-2010-0072)
Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allowsfor single point of management of data present on network attached storage NAS devices and distributed hostswhich may have different operating systems. A stack buffer overflow vulnerability...
Internet Explorer HTML Objects Memory Corruption (MS08-031; CVE-2008-1442)
Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. There exists a heap buffer overflow...
Multiple PDF products Launch Action Command Code Execution (APSB10-15; CVE-2009-0836; CVE-2010-1240)
Portable Document Format PDF is an open file format created by Adobe Systems. A vulnerability has been discovered in Adobe Reader. The vulnerability is due to an error in the Adobe Reader that fails to restrict the contents of one text field in the Launch File warning dialog, which makes it easie...
HP OpenView Network Node Manager ovet_demandpoll.exe Code Execution (CVE-2010-1550)
HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A remote code execution...
Internet Explorer 8 Developer Tools ActiveX Memory Corruption (MS10-034; CVE-2010-0811)
A remote code execution vulnerability has been reported in Internet Explorer 8 Developer Tools. The vulnerability is due to the way Internet Explorer accesses the Developer Tools ActiveX control. To trigger this issue, an attacker may create a malicious web page that will cause Internet Explorer ...
GhostScript PostScript Parser Stack Overflow (CVE-2010-1869)
GhostScript is an interpreter for the PostScript language and the Portable Document Format PDF. A stack overflow vulnerability has been discovered in GhostScript. The vulnerability is within the parser function of GhostScript. A remote attacker may exploit this issue via a specially crafted...
HP OpenView Storage Data Protector Cell Manager Heap Buffer Overflow (CVE-2007-2281)
HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...
Adobe Pagemaker MAIPM6.DLL Long Font Name Buffer Overflow (CVE-2007-5169)
Adobe PageMaker software is a page layout program. Adobe PageMaker native documents have file extension PMD. The data is stored using the Microsoft's proprietary Compound Document Object format, also called the OLE 2.0 docfile format. In this format, objects are stored inside streams. A directory...
CA eTrust Secure Content Manager Gateway FTP PASV Stack Overflow (CVE-2008-2541)
CA eTrust Secure Content Manager SCM is a gateway product for Windows platform that secures, monitors, filters and blocks potential threats from messaging and Web traffic. It provides protection against malware, spam, phishing, P2P file sharing and prevents access to known spyware sites. All CA S...
Microsoft PowerPoint LinkedSlideAtom Heap Overflow (MS10-004; CVE-2010-0030)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a heap overflow in Microsoft PowerPoint LinkedSlideAtom when processing malicious PowerPoint...
Microsoft Distributed Transaction Controller Denial of Service (MS05-051; CVE-2005-1979)
The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...
Microsoft Agent Crafted URL Stack Buffer Overflow (MS07-051; CVE-2007-3040)
The Microsoft Agent ActiveX control, exposes a set of methods and properties that can be used for scripting in HTML pages. There exists a buffer overflow vulnerability in Microsoft Windows Agent application. The flaw is due to wrongfully copying an overly large string to a fixed-size stack buffer...
Preemptive Protection against HP OpenView Network Node Manager nnmRptConfig.exe Template Buffer Overflow Vulnerability
A stack buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM CGI program nnmRptConfig.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to...
Novell iPrint Client ActiveX Control Multiple Buffer Overflows (CVE-2008-2431)
Novell iPrint Client is an application that allows users to install and manage printers, or submit print job from a web browser. Novell iPrint Client is bundled with a set of ActiveX controls that implement various functions. There exist multiple buffer overflow vulnerabilities in Novell iPrint...
Internet Explorer Malformed Request Header Information Disclosure (MS08-031; CVE-2008-1544)
An information disclosure vulnerability has been reported in the way that Internet Explorer handles certain request headers. The vulnerability is due to an error in Internet Explorer that incorrectly parses a specially crafted request header, allowing a violation of the same origin policy. To...