13538 matches found
Symantec IM Manager IMAdminReportTrendFormRun.asp SQL Injection (CVE-2010-0112)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...
Adobe Shockwave Director rcsL Chunk Remote Code Execution (APSA10-04; CVE-2010-3653)
Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A memory corruption vulnerability has been identified in Adobe Shockwave Player. An attacker can exploit th...
Microsoft Excel Real Time Data Array Record Code Execution (MS10-080; CVE-2010-3240)
Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. A memory corruption vulnerability has been identified in Microsoft...
Microsoft Internet Explorer 8 toStaticHTML API Information Disclosure (MS10-072; CVE-2010-3243)
Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. An information disclosure vulnerability has been reported in the way that the toStaticHTML API sanitizes HTML. The vulnerability is due to the way that Internet Explorer handles content using specific...
Microsoft Windows Media Player MPEG-4 Codec Code Execution (MS10-062; CVE-2010-0818)
MPEG-4 is an International Standards Organization ISO specification that covers many aspects of multimedia presentation including compression, authoring and delivery. A remote code execution vulnerability has been reported in the way the MPEG-4 codec handles supported format files. The...
Suspicious Characters in FTP User Name (CVE-2009-0542; CVE-2010-2453)
File Transfer Protocol is a popular protocol. FTP server may ask connecting users for their usernames and passwords. While the official FTP specification allows all characters in user names certain FTP servers fail to properly parse FTP usernames that contain special characters, most notably...
IBM Lotus Notes HTML Message Handling Buffer Overflow (CVE-2007-4222)
Lotus Notes is a client-server collaborative software and email system provided by IBM. The Lotus Notes email client application is capable of communicating with Lotus Domino server, as well as Internet email gateways using SMTP, POP, and IMAP protocols. A stack buffer overflow vulnerability exis...
IBM Lotus Notes Lotus 1-2-3 Work Sheet File Viewer Buffer Overflow (CVE-2007-6593)
There is a buffer overflow vulnerability exists in IBM Lotus Notes. The vulnerability is due to a boundary error within the Lotus 1-2-3 file viewer. A remote attacker could leverage this vulnerability by enticing a target user to view the maliciously crafted email attachment. Successful attack...
ClamAV CHM File Handling Integer Overflow (CVE-2005-2450)
Clam AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding several file formats in order to be able to scan them for viruses. One of such formats is the Microsoft compiled help files, as known as CHM. There...
Microsoft Access ACCWIZ.dll Uninitialized Variable Code Execution (MS10-044; CVE-2010-1881)
ACCWIZ.dll Microsoft Access Wizard Controls is a component of Microsoft Office that provides a library of Access ActiveX controls. A remote code execution vulnerability has been reported in the way that the AccWizObjects ActiveX control is instantiated by Microsoft Office and Internet Explorer. T...
Microsoft Exchange and Outlook TNEF Decoding Integer Overflow (CVE-2006-0002)
A buffer overflow vulnerability exists in the way Microsoft Exchange and Microsoft Outlook process TNEF encoded messages. When the TNEF decoder used by these products processes a TNEF object record with a large size value, an integer overflow can occur. An attacker potentially can exploit this...
Opera Browser Document Writing Uninitialized Memory Access (CVE-2010-1728)
Opera is a web browser and Internet suite developed by the Opera Software company. It handles common Internet-related tasks such as displaying web sites, sending and receiving e-mail messages, managing contacts, IRC online chatting, downloading files via BitTorrent, and reading web feeds. An...
Microsoft Word Document Parsing Buffer Overflow (MS05-023; CVE-2004-0963)
Microsoft Word is a popular document processing product released by the Microsoft Corporation. A Word document contains values which enable the product to correctly parse the document such as length, count, offset fields and so on. Some of these values are string that represents font name, style,...
Microsoft Windows Vista Windows Mail File Execution (MS07-034; CVE-2007-1658)
Microsoft Windows Mail product is an implementation of an email and newsgroup client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and formats. It is the successor to Outlook Express and is included in recent versions of Microsoft Windows...
Microsoft Excel FNGROUPNAME Record Uninitialized Memory (MS10-017; CVE-2010-0262)
Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this flaw ...
Internet Explorer Plugin Loading Address Bar Spoofing (MS06-021; CVE-2006-1626)
Microsoft Internet Explorer is a popular browser that is bundled with the Microsoft Windows family of operating systems. The browser is capable of rendering HTML pages, as well as images and other embedded media, which may be handled by third party plugins. Some of the plugins available to be use...
Apple QuickTime MOV File JVTCompEncodeFrame Heap Overflow (CVE-2007-2295)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...
Adobe PageMaker Key Strings Stack Buffer Overflow (CVE-2007-6432)
Adobe PageMaker is a page layout software program. Adobe PageMaker native documents have file extension PMD. The data is stored using the Microsoft's proprietary Compound Document Object format, also called the OLE 2.0 docfile format. In this format, objects are stored inside Streams, which are...
Microsoft PowerPoint Viewer TextBytesAtom Record Stack Overflow (MS10-004; CVE-2010-0033)
PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a stack overflow in Microsoft PowerPoint TextBytesAtom record when processing malicious PowerPoint...
Oracle Database DBMS_AQADM_SYS.GRANT_TYPE_ACCESS Procedure SQL Injection (CVE-2009-0977)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, e.g., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
Sun Java Web Start Splashscreen PNG Processing Buffer Overflow (CVE-2009-1097)
The Sun Java Web Start is a component of the Java 2 Runtime Environment JRE. It facilitates network deployment of applications developed with the Java programming language. This component enables stand-alone Java applications to be downloaded from a remote network location and run on a target...
Opera Browser file URI Handling Buffer Overflow (CVE-2008-5178)
Opera is a web browser and Internet suite developed by the Opera Software company. Opera handles common Internet-related tasks such as displaying web sites, sending and receiving e-mail messages, managing contacts, IRC online chatting, downloading files via BitTorrent, and reading web feeds. The...
Adobe Flash Media Server Resource Exhaustion Denial of Service (APSB09-18; CVE-2009-3791)
A resource exhaustion vulnerability has been discovered in Adobe Flash Media Server FMS. Flash Media Server FMS is an application server for Flash-based applications. Successful exploitation of this issue will create a denial of service condition, causing the application to become non-responsive...
FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)
The RADIUS protocol is used for the authentication, authorization and accounting of various network services. RADIUS is most often used by operating systems and hardware devices that provide network access to remote users. There is a large number of RADIUS implementations available, both commerci...
Oracle Database Server XDB.DBMS_XMLSCHEMA Buffer Overflow (CVE-2006-0272)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
Oracle Database SUBSCRIPTION_NAME Parameter SQL Injection (CVE-2005-1197)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user i...
Oracle Database Server DBMS_METADATA Package SQL Injection (CVE-2005-1197)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided to the database user i...
CVS Max-dotdot Protocol Command Integer Overflow (CVE-2004-0417)
Concurrent Versions System CVS is an open-source network-transparent version control system. CVS itself does not listen for, or accept network connections. To implement remote repository access, it can be installed as an inetd service, or invoked with the rsh/ssh command. Data between the server...
Qualcomm WorldMail IMAP Literal Token Parsing Buffer Overflow (CVE-2005-4267)
The Internet Message Access Protocol IMAP allows the access and manipulation of electronic mail. A buffer overflow vulnerability exists in the IMAP service component of Qualcomm WorldMail. The flaw is caused by insufficient boundary checks when processing IMAP commands. An unauthenticated attacke...
EMC Dantz Retrospect Backup Agent Denial of Service (CVE-2006-0995)
The EMC Retrospect Backup product suite is based on an agent and server model. The backup server can initiate backups, backup remote client machine, as well perform scheduled backups. The agent component is installed on a machine that is to be backed up by the server. The agent can be made to...
Castle Rock Computing SNMPc Network Manager Community String Buffer Overflow (CVE-2008-2214)
SNMPc is a secure distributed network management system developed by Castle Rock Computing. SNMPc uses Simple Network Management Protocol SNMP to communicate with other network entities. A buffer overflow vulnerability exists in Castle Rock Computing SNMPc Network Manager. The vulnerability can b...
Ipswitch IMail IMAP Service DELETE Command Buffer Overflow (CVE-2004-1520)
The Internet Message Access Protocol IMAP allows the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server. The protocol allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. There is ...
Apple QuickTime obji Atom Parsing Stack Buffer Overflow (CVE-2008-1022)
There exists a stack buffer overflow vulnerability in Apple QuickTime application. The vulnerability is due to improper processing of atoms in QuickTime movie files. A remote attacker may exploit this vulnerability by providing a crafted QuickTime movie file to the target user, causing abnormal...
Ipswitch IMail IMAP LOGIN Special Character Buffer Overflow (CVE-2005-1255)
The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. T...
Microsoft Workstation Service NetrGetJoinInformation Corruption (MS09-041; CVE-2009-1544)
Microsoft Windows Workstation Service routes local file system requests and remote file or print network requests via Remote Procedure Call RPC. RPC is a protocol that a program can use to request a service from another program which is located on another computer in a network. An elevation of...
Workaround for Microsoft Windows Embedded OpenType (EOT) Font Engine Remote Code Execution Vulnerabilities (MS09-029)
Multiple remote code execution vulnerabilities have been reported in the way Microsoft Windows Embedded OpenType EOT font technology parses data records and name tables in specially crafted embedded fonts. Embedded OpenType EOT fonts are a compact form of fonts designed for use on web pages. A...
Microsoft PowerPoint Converter GuideAtom Record Handling Error (MS09-017; CVE-2009-0225)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A memory corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafted...
Microsoft PowerPoint Converter ExObject Record Memory Corruption (MS09-017; CVE-2009-0223)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...
Update Protection against Oracle Application Server 10g OPMN Service Format String Vulnerability
A vulnerability was reported in Oracle Application Server, a multi-platform solution for developing and deploying enterprise applications and web sites. The flaw is due to insufficient validation of the URI part of HTTP requests. Remote attackers could exploit this vulnerability by sending a...
Workaround for Microsoft Windows Kernel Input Validation Remote Code Execution Vulnerability (MS09-006)
A remote code execution vulnerability has been discovered in the Windows kernel. The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. This vulnerability is caused by the improper validation of...
Microsoft Exchange Server MS-TNEF Memory Corruption (MS09-003; CVE-2009-0098)
The Microsoft Exchange Server is an implementation of an email server capable of handling numerous Internet protocol, including the Simple Mail Transfer Protocol SMTP. Transport Neutral Encapsulation Format TNEF is a format used by the Microsoft Exchange Server when sending messages formatted as...
Microsoft Excel File OBJ Record Memory Corruption (MS08-074; CVE-2008-4264)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to an error in Microsoft Excel as a result of pointer corruption when loading Excel formulas. An attacker can exploit this flaw to execu...
Microsoft Color Management System Path Name Buffer Overflow (MS08-046; CVE-2008-2245)
Image Color Management ICM is a color management system that parses and uses data in International Color Consortium ICC profiles to perform color translation operations. A remote code execution vulnerability was reported in the Microsoft Color Management System. The vulnerability is due to a flaw...
Preemptive Protection against Microsoft Excel Macro Validation Remote Code Execution Vulnerability (MS08-014)
A memory corruption vulnerability has been identified in Microsoft Excel. Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target...
IPS-1 Protection for Outlook NNTP Vulnerability (CVE-2007-3897/MS07-056)
Several versions of Microsoft Outlook have vulnerabilities in their handling of NNTP headers that could result in arbitrary code execution...
Update Protection against Sun Directory Server LDAP Denial of Service
There exists a vulnerability in the Sun Directory Server. The flaw is caused due to improper handling of certain overly large LDAP messages. An unauthenticated remote attacker may exploit this vulnerability by sending a crafted LDAP message to the target host which may terminate the affected LDAP...
Update Protection against Microsoft Management Console (MMC) Remote Code Execution Vulnerability (MS06-044)
Microsoft Management Console MMC is prone to a cross-site scripting XSS vulnerability. MMC is an application that allows a user to perform administrative tasks, configure Windows services and more. A remote attacker can exploit this vulnerability to execute arbitrary commands on an affected syste...
Microsoft Windows DHCP Server Service Denial of Service (CVE-2004-0899; CVE-2004-0900)
...
Tenda M3 Router Command Injection (CVE-2022-26289)
A command injection vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
WordPress Popup Maker Plugin Cross-Site Scripting (CVE-2022-1104)
A stored cross-site scripting vulnerability exists for the Popup Maker plugin for WordPress. This vulnerability is due to improper input validation for the popup settings process...