KLA10225 DoS vulnerability in WS FTP

A format string vulnerability was found in WS FTP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed format string. Original advisories - Exploitation Public exploits exist for this vulnerability...

KLA10389 ACE vulnerability in Warcraft III

An unspecified vulnerability was found in Warcraft III. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed map. Original advisories - Related products Warcraft-III:-The-Frozen-Throne CVE list...

KLA10106 ACE vulnerability in Cisco Secure Desktop

An improperly downloaded files verification vulnerability was found in Cisco Security Desktop. By exploiting this vulnerability malicious users can Execute Arbitrary Code. This vulnerability can be exploited from the network at a point related to Web Install via a specially designed web page...

KLA10381 Multiple vulnerabilities in VMware

Multiple critical vulnerabilities have been found in VMware. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. Improper library access can be exploited remotely at a point related to network share; 2...

KLA10148 ACE vulnerability in Quiksoft Easymail Objects

A buffer overflow was found in QuikSoft EasyMail Objects. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to the connection method. Original advisories - Related products...

KLA10042 Critical vulnerability in Adobe Download Manager

Improper request validation at NOS Microsystems getPlus Download Manager was found in Adobe Download Manager. Malicious users can exploit this vulnerability to bypass security and install arbitrary programs via a specially designed download site name. Original advisories Adobe bulletin Related...

KLA10414 ACe vulnerability in Avast! Antivirus

Improper input validation was found in Avast! Antivirus. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed IOCTL request. Original advisories - Related products...

KLA10179 Vulnerability in Google Desktop

An unspecified vulnerability was found in Google Desktop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited by vectors related to Gadgets. Original advisories securityfocus Related products Google-Desktop CVE list Solution Update to...

KLA10315 Multiple vulnerabilities in SUPERAntiSpyware

Multiple serious vulnerabilities have been found in SUPERAntiSpyware. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code and gain privileges. Below is a complete list of vulnerabilities 1. Unsafe buffers, function parameter handling, unsafe pointe...

KLA10073 SB vulnerability in Apple AirPort

An improperly MAC address distribution was found in Apple AirPort. By exploiting this vulnerability malicious users can bypass access restrictions. This vulnerability can be exploited from the network via an authentication frame. Original advisories vulnerability description Related products...

KLA10287 ACE vulnerability in PDF-XChange Viewer

An unspecified vulnerability was found in PDF-XChange Viewer. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited remotely via a specially designed PDF file. Original advisories securityfocus Related products...

KLA10241 ACE vulnerability in Lateral Arts Photobox Uploader

A buffer overflow was found in LA Photobox Uploader. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URL. Original advisories Juniper description Related products Photobox-Uploader-ActiveX-Control C...

KLA10108 DoS vulnerability in Cisco VPN client

Improper error handling was found in Cisco VPN Client. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the cvpnd service via cvpnd.exe manipulations. Original advisories Cisco bulletin Related products...

KLA10347 DoS vulnerability in VirtualBox

An unspecified vulnerability was found in xVM VirtualBox. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally via vectors related to guest additions. Original advisories - Related products Oracle-VirtualBox CVE list CVE-2009-39...

KLA10094 DoS vulnerabilities in CA products

An unspecified vulnerability was found in CA products. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to arclib via a specially designed RAR archive. Original...

KLA10344 Multiple vulnerabilities in Sun Java SE

Multiple serious vulnerabilities have been found in SUN Java SE. Malicious users can exploit these vulnerabilities to cause denial of service or bypass authentication. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely via specially designed HTTP headers or...

KLA10417 ACE vulnerability in eEye Retina Network Security

A buffer overflow was found in eEye Retina Network Security. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed RWS file. Original advisories - Exploitation Public exploits...

KLA10183 DoS vulnerability in Gpg4Win

An unspecified vulnerability was found in Gpg4Win. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed certificate. Original advisories - Related products Gpg4win CVE list CVE-2009-3805 warning Solutio...

KLA10374 ACE vulnerability in UiTV UiPlayer

A buffer overflow was found in UiTV UiPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename parameter. Original advisories - Related products UiTV-UiPlayer CVE list CVE-2009-2970 critical...

KLA10166 ACE vulnerability in FrontRange HEAT

An SQL injection vulnerability was found in FrontRange HEAT. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to Call Logging. Original advisories - Related products FrontRange-HEAT CVE list CVE-2009-3642...

KLA10131 DoS vulnerability in CuteFTP

A buffer overflow was found in CuteFTP. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed site list. Original advisories - Related products CuteFTP-Pro CuteFTP-Home...

KLA10333 DoS vulnerability in TFTP

An unspecified vulnerability was found in the TFTP Server. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Exploitation Public exploits exist for this vulnerability...

KLA10085 SUI vulnerability in Avant

An unspecified vulnerability was found in the Avant browser. By exploiting this vulnerability malicious users can spoof the address bar. This vulnerability can be exploited from the network at a point related to opening windows via a specially designed URI. Original advisories Blog record Related...

KLA10127 ACE vulnerability in CoolPreviews

An unspecified vulnerability was found in CoolPreviews. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed link. Original advisories security-assessment advisory Related products CoolPreviews C...

KLA10249 Vulnerability in MDaemon

Multiple unspecified vulnerabilities were found in MDaemon. By exploiting this vulnerability malicious users can have an unknown impact on vectors related to XSS. Original advisories - Related products MDaemon CVE list CVE-2008-6967 warning Solution Update to latest version Impacts SB Security...

KLA10422 ACE vulnerability in ooVoo

A buffer overflow was found in ooVoo. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URI. Original advisories - Exploitation Public exploits exist for this...

KLA10158 DoS vulnerability in FireBird

An unspecified vulnerability was found in FireBird. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed message. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...

KLA10233 ACE vulnerability in Kantaris Media Player

A buffer overflow was found in Kantaris Media Player. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories Juniper description Related products...

KLA10348 ACE vulnerability in SureThing CD/DVD Labeler

Buffer overflow was found in the SureThing CD/DVD Labeler. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed playlist. Original advisories - Related products SureThing-CD-DVD-Labeler CVE list...

KLA10164 DoS vulnerability in Foxit Reader

Improper string handling was found in Foxit Reader. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PDF file. Original advisories - Related products Foxit-Reader...

KLA10114 DoS vulnerability in Citrix Secure Gateway

An unspecified vulnerability was found in the Citrix Secure Gateway. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network via a specially designed request. Original advisories Citrix bulletin Related products...

KLA10033 Multiple ACE vulnerabilities in Adobe Acrobat & Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat & Reader. getAnnots and customDictionaryOpen methods in JavaScript API can be exploited to cause denial of service or execute arbitrary code through a specially designed pdf file. Original advisories Adobe bulletin Exploitation...

KLA10317 ACE vulnerability in SafeNet SoftRemote

A buffer overflow was found in SoftRemote. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products SafeNet-SoftRemote CVE list CVE-2009-1943 critical Solution...

KLA10214 DoS vulnerability in ICQ

A buffer overflow was found in ICQ. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed internet shortcut. Original advisories - Exploitation Public exploits exist f...

KLA10050 SB vulnerability in AVG

An unspecified vulnerability was found in AVG Anti-virus. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited at a point related to the AVG parsing engine via a specially designed RAR or ZIP archive. Original advisories...

KLA10172 Vulnerability in Garmin Communicator Plugin

An improper restriction was found in Garmin Communicator Plug-In. By exploiting this vulnerability malicious users can obtain sensitive information or reconfigure GPS device. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products...

KLA10210 Vulnerability in IBM Tivoli Storage Manager

An unspecified vulnerability was found in IBM Tivoli Storage Manager. By exploiting this vulnerability malicious users can conduct a man-in-the-middle attack and read arbitrary files. This vulnerability can be exploited remotely at a point related to SSL. Original advisories - Related products...

KLA10392 ACE vulnerability in Microsoft Intelligent Application Gateway

An unspecified vulnerability was found in Microsoft IAG. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed arguments. Original advisories - Related products Microsoft-Intelligent-Application-Gateway CVE...

KLA10137 ACE vulnerability in DivX Web Player

An integer signing error was found in DivX Web Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DivX file. Original advisories - Related products DivX-Web-Player CVE list CVE-2008-5259 critic...

KLA10282 Multiple vulnerabilities in Oracle Database

Unspecified vulnerabilities were found in the Oracle Database. By exploiting these vulnerabilities malicious users can affect availability, confidentiality and integrity. These vulnerabilities can be exploited remotely via unknown vectors. Original advisories - Related products Oracle-Database CV...

KLA10426 Vulnerability in 7-Zip

An unspecified vulnerability was found in 7-Zip. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products 7-Zip CVE list CVE-2008-6536 critical Solution Update to latest...

KLA10286 WLF vulnerability in Orbit Downloader

An argument injection vulnerability was found in Orbit Downloader. By exploiting this vulnerability malicious users can overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed method call. Original advisories - Exploitation Public exploits exist for this...

KLA10064 DoS vulnerability in SlySoft

An improper buffer validation vulnerability was found in SlySoft products. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited locally at a point related to ElbyCDIO.sys via a specially designed IOCTL call. Original advisories CloneC...

KLA10198 Multiple vulnerabilities in IBM Director

Multiple serious vulnerabilities have been found in IBM Director. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Vectors related to CIM server can be exploited remotely via a specially designed...

KLA10090 RCE vulnerability in BlackBerry Desktop Manager

A buffer overflow was found in BlackBerry Desktop Software. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to Lotus Notes Intellisync via a specially designed web page. Original advisories BlackBerry...

KLA10213 LPE vulnerability in IBM WebSphere MQ

An unspecified vulnerability was found in the IBM WebSphere MQ. By exploiting this vulnerability malicious users can gain priveleges. This vulnerability can be exploited locally at a point related to the queue manager. Original advisories - Related products IBM-WebSphere-MQ CVE list CVE-2009-0439...

KLA10364 ACE vulnerability in UltraVNC & TightVNC

Integer signing errors were found in UltraVNC & TightVNC. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message. Original advisories - Related products UltraVNC...

KLA11371 ACE vulnerability in TightVNC

Integer signing errors were found in TightVNC. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message. Original advisories - Exploitation Public exploits exist f...

KLA10051 ACE vulnerability in Axis Camera Control

A buffer overflow vulnerability was found in Axis Camera Control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to AxisCamControl.ocx via a specially designed imagepantilt property value. Origin...

KLA10308 ACE vulnerability in RealVNC

An unspecified vulnerability was found in RealVNC. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed RFB data. Original advisories - Related products RealVNC-Viewer CVE list CVE-2008-4770 critical...