RealNetworks Helix Server NTLM Authentication Heap Overflow (CVE-2010-1317)

Helix Server is a multi-media server that is designed to serve streaming and static audio and video content. A heap-based buffer overflow vulnerability has been reported in RealNetworks Helix Server products. The flaw is due to an error when handling Base64-encoded NTLM Authentication data. A...

PHF CGI Program Remote Command Execution (CVE-1999-0067)

There exists a vulnerability in the sample cgi bin program, PHF, which is included with NCSA httpd, and Apache 1.0.3, an NCSA derivitive. By supplying certain characters with special meaning to the shell, arbitrary commands can be executed by remote users. In case of a successful attack, a remote...

Symantec Products CLIproxy.dll ActiveX Control Buffer Overflow (CVE-2010-0108)

Symantec Antivirus and Symantec Client Security are applications designed to protect organizations from the threat of viruses, malware, and intrusion attempts. Both applications can be deployed in an enterprise network environment, and they both support an anti-virus scanning mechanism, a firewal...

Update Protection against Microsoft SMB Client Transaction Memory Corruption Vulnerability (MS10-020)

A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client implementation. The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote attacker may exploit this vulnerability to take complete control ...

Gravity GTD rpc.php Malformed objectname Parameter (CVE-2008-5962; CVE-2008-5963)

Gravity GTD is an open source list manager for tracking action items according to the principles of Getting Things Done GTD. There exist multiple vulnerabilities in Gravity GTD. One attack vector could allow remote attackers to conduct directory traversal attacks and possibly read or write...

Orbit Downloader Download Argument Processing Stack Buffer Overflow (CVE-2008-1602)

There exists a buffer overflow vulnerability in Orbit Downloader. The vulnerability is caused due to insufficient boundary checking when the application processes the URL string. An attacker may exploit this vulnerability by enticing a target user to open a malicious long URL. Successful...

Apple QuickTime crgn Atom Parsing Memory Corruption (CVE-2008-1017)

Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. There exists a memory corruption vulnerability in Apple QuickTime application. The vulnerability is due to...

Microsoft DirectX Crafted MJPEG Stream Handling Code Execution (MS08-033; CVE-2008-0011)

Microsoft DirectX is a software component which contains a set of APIs that provide access to graphics acceleration chips and sound cards and other types of media hardware. These APIs control low-level functions including graphics acceleration, support for input devices such as joysticks,...

Microsoft Outlook Web Access Cross-Site Scripting (MS05-029; CVE-2005-0563)

Microsoft Outlook Web Access OWA is a component of Microsoft Exchange Server. OWA allows authorized users to send and receive email, manage a calendar, and perform other functions using a web browser. OWA utilizes HTML, CSS and scripting techniques to present the user interface through the web...

Apple QuickTime FlashPix File Buffer Overflow (CVE-2009-2798)

Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the image file formats supported by QuickTime is the FlashPix image format. A heap buffer overflow...

Qualcomm WorldMail IMAP Server Directory Traversal (CVE-2005-3189)

The Qualcomm WorldMail product is an email and messaging server. The product is designed for small to large enterprise environments. WorldMail provides, amongst other services, an IMAP server which allows email retrieval. There exists a directory traversal vulnerability in Qualcomm WorldMail IMAP...

Internet Explorer COM Object Instantiation Memory Corruption (MS06-021; CVE-2006-1303)

Microsoft Internet Explorer is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. The browser is also compatible with Microsoft's Common Object Model COM scheme, whereby...

Preemptive Protection against HP OpenView Network Node Manager webappmon.exe CGI Host Header Buffer Overflow

A buffer overflow vulnerability exists in the HP OpenView Network Node Manager NNM CGI program webappmon.exe. The vulnerability is due to a boundary error when processing the Host header from HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP...

Microsoft WMF File Polypolygon Function Buffer Overflow (MS06-026; CVE-2006-2376)

Microsoft Windows Metafile Format WMF is a proprietary standard for representing graphical objects, mainly vector based graphic. WMF is capable of representing drawing lines, polygons, curves, and fonts. A vulnerability has been discovered in the Graphics Rendering Engine GRE component of Microso...

Trend Micro OfficeScan Multiple CGI Modules Form Processing Buffer Overflow (CVE-2008-3862)

Trend Micro OfficeScan is a centralized virus and security scan management system. It is meant to consolidate the coordination of security scan actions and the management of Trend Micro virus scanner products installed on nodes of an enterprise network. The product is a central command center for...

Novell QuickFinder Server Multiple Cross Site Scripting (CVE-2009-0611)

QuickFinder is a site-specific search engine that allows users to search the public and private sites, partners' sites and any number of additional Web sites across the Internet, all from a single search interface on one Web site. A cross-site scripting vulnerability exists in Novell QuickFinder...

Sybase EAServer WebConsole Buffer Overflow (CVE-2005-2297)

Sybase EAServer is a web service application server suite. The software provides a web-based management console to allow a remote user using a web browser to perform database administration tasks. The communication between the client and the web-based management console is encapsulated in the HTT...

Oracle Database dbms_assert Filter Bypass (CVE-2006-5340)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Oracle Application Server Reports Arbitrary System Command Execution (CVE-2005-2371)

Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. One of such component is the Oracle Reports Services. The Reports Services component allows...

Apache Tomcat URIencoding Directory Traversal (CVE-2007-0450; CVE-2008-2938)

Apache Tomcat is an implementation of the Java Servlet and JavaServer pages technologies. The software provides the servlet container used in development and deployment of Java based web applications. Users access Tomcat applications using web browsers that communicate to the server via the HTTP...

Microsoft .NET Framework Arbitrary Memory Modification (MS09-061; CVE-2009-2497)

The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...

Microsoft DirectShow AVI Decoder Buffer Overflow (MS05-050; CVE-2005-2128)

Microsoft DirectX is a set of low-level application programming interfaces APIs for creating high-performance multimedia applications. Microsoft DirectShow is an architecture for streaming media on the Microsoft Windows platform and provides for the capture and playback of multimedia streams. It...

Internet Explorer IsComponentInstalled Buffer Overflow (CVE-2006-1016)

The Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, scripting languages and interpretation of various other popular Internet specifications. There exists a buffer overflow vulnerability in the IsComponentInstalled function...

Microsoft Visual Studio dbp and sln File Handling Buffer Overflow (CVE-2006-1043)

The Microsoft Visual Studio 6.0 integrated development environment IDE suite is designed for building Windows based applications and Web solutions. The product contains several tools which can be used to design programs in languages such as C++, or Basic. A development environment in Visual Studi...

Microsoft Remote Desktop Client Connection ActiveX Heap Overflow (MS09-044; CVE-2009-1929)

The Microsoft Remote Desktop Protocol RDP provides remote display and input capabilities over network connections for Microsoft Windows-based applications running on a server. The Remote Desktop Web Connection ActiveX control allows accessing a computer, via the Internet, from another computer...

Microsoft PowerPoint Converter SlideRec Record Memory Corruption (MS09-017; CVE-2009-0222)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...

Microsoft Word RTF Object Parsing Remote Code Execution (MS08-072; CVE-2008-4027)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to a memory calculation error in Microsoft Word that fails to properly handle specially crafted control words in Rich Text Format .rtf files....

Internet Explorer ActiveX Navigate Handling Code Execution (MS08-073; CVE-2008-4258)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Internet Explorer that fails to properly validate parameters made during a method call in the...

Microsoft Word RTF Control Word Handling Integer Overflow (MS08-072; CVE-2008-4025)

Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...

iseemedia LPViewer ActiveX Control Multiple Buffer Overflows (CVE-2008-4384)

iseemedia is a software development company focused on the commercialization of advanced, rich content adaptation and distribution solutions for Web applications. iseemedia's platforms are used by websites worldwide. The iseemedia LPViewer ActiveX control contains multiple buffer overflow...

Microsoft Windows GDI+ EMF Parsing Memory Corruption (MS08-052; CVE-2008-3012)

Enhanced Metafile EMF is an image format that can contain both vector information and bitmap information. A remote code execution vulnerability has been discovered in the way GDI+ handles EMF image files. The vulnerability is due to a memory corruption error in GDI+ that fails to properly process...

Microsoft Windows GDI+ WMF Parsing Buffer Overflow (MS08-052; CVE-2008-3014)

Windows Metafile WMF is a 16-bit metafile image format optimized for the Windows operating system that can contain both vector information and bitmap information. A remote code execution vulnerability has been discovered in the way GDI+ allocates memory for WMF image files. The vulnerability is d...

Security Best Practice: Familiarize Yourself with the Network Quota Protection

Network Quota enforces a limit upon the number of connections that are allowed from the same source IP, to protect against Denial Of Service attacks...

EPS Files (CVE-2008-3019)

EPS is a standard file format for importing and exporting PostScript files. It is usually a single page PostScript program that describes an illustration or an entire page. An EPS file can contain any combination of text, graphics and images. A remote code execution vulnerability was reported in...

Microsoft Windows PGM Fragment Handling Denial of Service (MS08-036; CVE-2008-1441)

PGM is a reliable and scalable multicast protocol that enables receivers to detect loss, request retransmission of lost data, or notify an application of unrecoverable loss. The vulnerability is due to the PGM's parsing code that fails to properly handle malformed PGM packets that contain an...

How To Protect Against Instant Messaging Vulnerabilities: Blocking Google Talk

Google Talk is an application used to call or send instant messages for Microsoft Windows operating systems. Instant messaging applications may risk an organization's security in the following ways:1. Vulnerabilities in IM applications could be exploited to compromise a user's system i.e MSN...

Skycaiji Command Injection (CVE-2022-28096)

A command injection vulnerability exists in Skycaiji. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Microsoft Windows CNG Key Isolation Service Elevation of Privilege (CVE-2022-41125)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Pulse Connect Secure HTTP Request Smuggling (CVE-2022-21826)

An HTTP Request Smuggling vulnerability exists in Pulse Connect Secure. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Win32k Elevation of Privilege (CVE-2022-38050)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Graphics Component Elevation of Privilege (CVE-2022-38051)

An elevation of privilege vulnerability exists in Microsoft Graphics Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Exchange Server Remote Code Execution (CVE-2022-41082; CVE-2022-41040)

A remote code execution vulnerability exists in Microsoft Exchange. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Roundcube Webmail func.inc Cross-site Scripting (CVE-2018-19206)

A cross-site scripting vulnerability exists in Roundcube Webmail. The vulnerability is due to improper handling of a tag within HTML attachments. A remote attacker can exploit this vulnerability by enticing a user to open an attachment...

Adobe Acrobat and Reader Out-of-bounds Read (APSB22-32: CVE-2022-34226)

An out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

Microsoft Windows Installer Elevation of Privilege (CVE-2022-30147)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat and Reader Stack-based Buffer Overflow (APSB22-16: CVE-2022-27791)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Tenda AX1806 Router Denial of Service (CVE-2022-25546)

A denial of service vulnerability exists in Tenda AX1806 Router. Successful exploitation of this vulnerability would allow remote attackers to cause denial of service on the affected system...

Tenda AX1806 Router Buffer Overflow (CVE-2022-25547)

A buffer overflow vulnerability exists in Tenda AX1806 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

GitLab CE Remote Code Execution (CVE-2021-22205)

A remote code execution vulnerability exists in GitLab CE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Eaton IPM Arbitrary File Deletion (CVE-2021-23278)

An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Management and Eaton Intelligent Power Protector. The vulnerability is due to missing input validation in mapssrv.js and nodeupgradesrv.js...