Microsoft Windows LSASS Malformed LDAP Messages Heap Overflow (MS10-060; CVE-2010-0820)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service. An authenticated elevation of privilege vulnerability has be...

Embedded Base-64 Encoded TTF Files (CVE-2010-2738)

Unicode Script Processor is a Windows component that enables a text layout client to format complex scripts. A remote code execution vulnerability has been reported in the way affected versions of Microsoft Windows incorrectly parse specific font types. A remote attacker could exploit this issue...

CA BrightStor ARCserve Backup Message Engine Stack Overflow (CVE-2007-5327)

There exists a buffer overflow vulnerability in CA BrightStor ARCserve Backup Message Engine. The vulnerability is due to insufficient boundary checking when processing strings supplied in RPC requests. Successful exploitation of this vulnerability allows a remote unauthenticated attacker to...

IBM Lotus Notes Lotus 1-2-3 Work Sheet File Viewer Buffer Overflow (CVE-2007-6593)

There is a buffer overflow vulnerability exists in IBM Lotus Notes. The vulnerability is due to a boundary error within the Lotus 1-2-3 file viewer. A remote attacker could leverage this vulnerability by enticing a target user to view the maliciously crafted email attachment. Successful attack...

ToolTalk rpc.ttdbserverd Database Parser Heap Overflow (CVE-2010-0083)

ToolTalk is a communications system developed by Sun Microsystems in order to allow applications to communicate with each other at runtime. A heap overflow vulnerability has been discovered in the ToolTalk database server. The vulnerability is located within a function of the ToolTalk database...

Internet Explorer HTML Objects Memory Corruption (MS08-031; CVE-2008-1442)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. There exists a heap buffer overflow...

Microsoft IIS4 Exair Sample Site Denial Of Service (CVE-1999-0449)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft Windows 2000, XP and Server 2003. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of...

HP OpenView Storage Data Protector Cell Manager Heap Buffer Overflow (CVE-2007-2281)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...

Microsoft Office SharePoint Server help.aspx Cross Site Scripting (CVE-2010-0817)

Microsoft Windows SharePoint Services WSS is an add-on component of Windows Server that provides content managament functionality. WSS is based on IIS and ASP.NET technologies, providing a basic portal infrastructure, collaborative editing of documents, document organization, and version control...

IBM Lotus Notes HTML Speed Reader Long URL Buffer Overflow (CVE-2005-2618)

Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communication with email servers over the SMTP, POP and IMAP protocols. A stack buffer overflow vulnerability exists in the IBM Lotus Notes HTML Speed...

CA Multiple Products HTTP Request Buffer Overflow (CVE-2005-3190)

The Computer Associates CA BrightStor backup server product line provides facilities for integration with third party software and hardware products to consolidate storage management tasks. CA uses an XML-based interface named iSponsor/iGateway to integrate with storage management applications fr...

MySQL MaxDB Webtool GET Command Buffer Overflow (CVE-2005-0684)

MaxDB is an open source database application suite developed by MySQL AB available for various operating systems. The software bundles an HTTP server component, named Webtool, used to provide web-based application interfaces. Clients can connect to the Webtool with a web browser and access...

Microsoft Windows Graphics Rendering Engine Buffer Overflow (MS04-032; CVE-2004-0209)

The Microsoft Windows Metafile Format WMF is used to store pictures and other graphical renderings as either vector or bitmap-format graphical data. The vector data stored in WMF files is described as Microsoft Windows Graphics Device Interface GDI commands. The WMF format is the original 16-bit...

Trend Micro OfficeScan Console Authentication Buffer Overflow (CVE-2007-3454)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on the nodes of an enterprise network. The product is a central command centre...

Digium Asterisk Invalid RTP Payload Type Number Memory Corruption (CVE-2008-1289)

Asterisk is an open source software implementation of a telephone private branch exchange. Like any PBX, it allows a number of attached telephones to make calls to one another, and to connect to other telephone services including the public switched telephone network. Asterisk supports a wide ran...

Adobe PageMaker Key Strings Stack Buffer Overflow (CVE-2007-6432)

Adobe PageMaker is a page layout software program. Adobe PageMaker native documents have file extension PMD. The data is stored using the Microsoft's proprietary Compound Document Object format, also called the OLE 2.0 docfile format. In this format, objects are stored inside Streams, which are...

Microsoft PowerPoint LinkedSlideAtom Heap Overflow (MS10-004; CVE-2010-0030)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a heap overflow in Microsoft PowerPoint LinkedSlideAtom when processing malicious PowerPoint...

Microsoft Windows Shell Handler URL Validation Code Execution (MS10-007; CVE-2010-0027)

A remote code execution vulnerability has been reported in the Microsoft Windows ShellExecute API function. The Windows user interface provides users with access to a wide variety of objects necessary for running applications and managing the operating system. ShellExecute is part of the Windows...

Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow (CVE-2009-1568)

Novell iPrint Client is an application that allows users to install and manage printers, or submit print jobs from a web browser. Novell iPrint Client is bundled with an ActiveX control that implements various functions. A buffer overflow vulnerability exists in Novell iPrint Client. The...

Internet Explorer Script Action Handler Buffer Overflow (CVE-2006-1245)

Microsoft Internet Explorer is the most widely used web browser application used today. The browser is capable of processing HTML, scripting languages, and various other popular Internet specifications. A vulnerability has been identified in Microsoft Internet Explorer. The vulnerability is creat...

Update Protection against EMC RepliStor rep_srv and ctrlservice Denial of Service

A denial of service vulnerability exists in EMC RepliStor. EMC RepliStor is a data recovery and protection system designed for Microsoft Windows. The vulnerability is due to an input validation error while parsing a specially crafted packet sent to 'repsrv.exe' and 'ctrlservice.exe' services...

Microsoft DirectX RLE Compressed Targa Image File Heap Overflow (CVE-2006-4183)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. The three-dimension 3D acceleration engine of DirectX is known as Direct3D. Direct3D include texture rendering, which displays bitmap images on the surface of 3D...

VMware Server ISAPI Extension Remote Denial Of Service (CVE-2008-3697)

The VMware server is a server virtualization platform that allows a single physical server to run multiple virtual machines simultaneously. The server provides a web-based management interface called VMware Management Console. For VMware server hosted on windows servers, the IIS server is used to...

Internet Explorer Malformed Request Header Information Disclosure (MS08-031; CVE-2008-1544)

An information disclosure vulnerability has been reported in the way that Internet Explorer handles certain request headers. The vulnerability is due to an error in Internet Explorer that incorrectly parses a specially crafted request header, allowing a violation of the same origin policy. To...

CA BrightStor ARCserve Backup caloggerd Opcode 79 Stack Buffer Overflow (CVE-2008-2242)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

Citrix Systems Multiple Products IMA Service Buffer Overflow (CVE-2008-0356)

The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a buffer overflow vulnerability in Independent...

HP OpenView Network Node Manager HTTP Handling Buffer Overflow (CVE-2008-1697)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, for example: OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. There exists a buffer...

Multiple Products Arbitrary File Location Upload (CVE-2004-0959; CVE-2015-0781)

A directory traversal vulnerability exists in several products including Novell ZENworks Configuration Management and web servers working with PHP 5.0.2 and below. The vulnerability is due to incorrect handling of the Content-Disposition MIME header. Remote unauthenticated attackers can leverage...

Internet Explorer DirectAnimation COM Object Memory Corruption (MS06-042; CVE-2006-3638)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating a COM objec...

Sophos Anti-Virus CAB File Invalid Folder Count Heap Overflow (CVE-2006-0994)

Sophos Anti-Virus AV is a product that provides virus scanning functionality for desktop and server systems. It can scan files on the local system or files downloaded from the network for known viruses, Trojans, and other malicious programs. The AV product is capable of interpreting numerous...

Preemptive Protection against Microsoft GDI+ PNG Heap Overflow Vulnerability (MS09-062)

A remote code execution vulnerability has been discovered in the way that GDI+ allocates memory. The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer. A remote attacker may trigger this issue via a...

Ipswitch WhatsUp Gold DOS Device HTTP Request Denial of Service (CVE-2004-0799)

WhatsUp is a network management and monitoring application developed by Ipswitch Inc. It has a built-in web server to enable remote access to the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold processes a request that contains a special device nam...

Microsoft Windows ASF File Media Header Parsing Code Execution (MS09-047; CVE-2009-2498)

ASF Advanced Systems Format is a file format that stores audio and video information and is specially designed to run over networks like the Internet. It is a compressed format that contains streaming audio, video, slide shows, and synchronized events. ASF enables content to be delivered as a...

Adobe Shockwave Player Pointer Memory Overwrite (APSB09-08; CVE-2009-1860)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory overwrite vulnerability has been identified in Adobe Shockwave Player.The vulnerability is due to ...

Microsoft Windows Print Spooler LoadLibrary Information Disclosure (MS09-022; CVE-2009-0230)

The Print Spooler service manages the printing process, which includes such tasks as retrieving the location of the correct printer driver, loading that driver, spooling high-level function calls into a print job, and scheduling print jobs. An elevation of privilege vulnerability has been reporte...

Microsoft Word Multiple SPRM Records Buffer Overflow (MS09-027; CVE-2009-0563)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to an error in Microsoft Word that fails to properly handle Word files. A remote attacker could trigger this flaw by convincing a victim to...

Microsoft PowerPoint LinkedSlide Record Integer Overflow (MS09-017; CVE-2009-0221)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading an invalid record type in a...

Update Protection against Akamai Download Manager Arbitrary Program Execution

In its Update Rollup for ActiveX Kill Bits from February 2009 960715, Microsoft has released a security update to set a kill bit for an ActiveX control developed by Akamai Technologies. Akamai Technologies has released a security update that addresses a vulnerability in the affected...

Update Protection against Novell iPrint Client ActiveX Control Multiple Vulnerabilities

Multiple Vulnerabilities have been reported in Novell iPrint Client. Novell iPrint Client is an application that allows users to install and manage printers, or submit print job from a web browser. Novell iPrint Client is bundled with a set of ActiveX controls that implement various functions...

Preemptive Protection against HP OpenView Node Manager Remote Code Execution Vulnerability

HP OpenView Network Node Manager NNM is a software application designed for management, maintenance and monitoring of networks and network devices. The application fails to properly check crafted HTTP requests. By sending a specially-crafted overly long HTTP GET request, a remote unauthenticated...

Microsoft DirectX SAMI File Parsing Code Execution (MS07-064; CVE-2007-3901)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. DirectX can parse various file formats which include SAMI files. Synchronized Accessible Media Interchange SAMI files are text files that contain the text strings use...

Security Best Practice: Protect Yourself from DCOM vulnerabilities

The Distributed Component Object Model DCOM is a protocol that enables software components to communicate directly over a network. Previously called "Network OLE," DCOM is designed for use across multiple network transports, including Internet protocols such as HTTP.There are several known and...

Zoho ManageEngine ServiceDesk Plus Cross-Site Scripting (CVE-2021-20080)

A stored cross-site scripting vulnerability exists in Zoho ManageEngine ServiceDesk Plus. The vulnerability is due to improper sanitization of user supplied XML...

Zoho ManageEngine SQL Injection (CVE-2021-41288)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the getReportData method...

Zoho ManageEngine ServiceDesk Cross-Site Scripting (CVE-2021-46065)

A cross-site scripting vulnerability exists in Zoho ManageEngine ServiceDesk. The vulnerability is due to improper sanitization of secondary email field parameter...

IBM Spectrum Protect Plus uploadHttpsCertificate Command Injection (CVE-2020-4241)

A command injection vulnerability exists in IBM Spectrum Protect Plus. The vulnerability is due to a lack of input validation in the Administrative Console service when parsing the filename parameter in the uploadHttpsCertificate method. A remote authenticated attacker could exploit this...

SolarWinds Orion Arbitrary File Write (CVE-2020-27871)

An arbitrary file write vulnerability exists in SolarWinds Network Configuration Manager. The vulnerability is due to insufficient validation of file types for vulnerability announcement data files in VulnerabilitySettings.aspx, combined with a lack of restriction on destination paths. A remote,...

Hitron CHITA Command Injection (CVE-2022-25017)

A command injection vulnerability exists in Hitron CHITA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Atlassian Bitbucket Command Injection (CVE-2022-36804)

A command injection vulnerability exists in Atlassian Bitbucket. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Victor CMS Remote Code Execution (CVE-2022-27478)

A remote code execution vulnerability exists in Victor CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...