KLA10257 Vulnerability in Macrovision SafeDisc

A buffer overflow was found in Macrovision SafeDisc. By exploiting this vulnerability malicious users can overwrite arbitrary memory locations and gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Related products...

KLA10387 DoS vulnerability in VMware

An unspecified vulnerability was found in VMware products. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via vectors related to Reconfig.DLL Original advisories VMware advisory Related products VMware-Workstation...

KLA10298 ACE vulnerability in PowerArchiver

A buffer overflow was found in PowerArchiver. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename. Original advisories Version gistory Related products PowerArchiver-2010 CVE list CVE-2007-5279...

KLA10060 ACE vulnerability in Kazaa & Grokster

A buffer overflow vulnerability was found in Kazaa & Grokster. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to Altnet Download Manager via a specially designed installation method call. Origina...

KLA10100 ACE vulnerability in CenterTools DriveLock

A buffer overflow was found in CenterTools DriveLock. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed HTTP request. Original advisories - Related products CenterTools-DriveLock CVE list CVE-2007-5209...

KLA10047 ACE vulnerability in AOL AIM

Lack of special tag filtering was found in the AIM. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to an embedded Internet Explorer server control via a specially designed message. Original...

KLA10271 SB vulnerability in NetSupport Manager Client

An unspecified vulnerability was found in NetSupport Manager Client. By exploiting this vulnerability malicious users can bypass auth schemes. This vulnerability can be exploited remotely via spoofing UI. Original advisories - Related products NetSupport-Manager CVE list CVE-2007-5057 critical...

KLA11447 ACE vulnerability in WinSCP

Interpretation conflict vulnerability was found in WinSCP. Malicious users can exploit this vulnerability remotely to execute arbitrary code. Original advisories - Related products WinSCP CVE list CVE-2007-4909 critical Solution Update to the latest version Download WinSCP Impacts ACE Arbitrary...

KLA10397 ACE vulnerability in MSN & Live

A buffer overflow was found in Microsoft Live. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products Microsoft-MSN-Messenger Windows-Live-Messenger CVE list...

KLA10411 LPE vulnerability in ZoneAlarm

An unspecified vulnerability was found in ZoneAlarm. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed IRP. Original advisories - Related products ZoneAlarm CVE list CVE-2007-4216 high Solution Update to late...

KLA10408 ACE vulnerability in Yahoo! Widgets

A buffer overflow was found in Yahoo! Widgets. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed argument. Original advisories - Related products Yahoo!-Widgets CVE list CVE-2007-4034 critical Solutio...

KLA10268 Multiple vulnerabilities in ESET NOD32

Multiple serious vulnerabilities have been found in ESET NOD32. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Division by zero can be exploited remotely via a specially designed packet 2. An...

KLA10222 ACE vulnerabilities in player

A buffer overflow was found in Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed attributes. Original advisories - Related products InterActual-Player Roxio-CinePlayer CVE list CVE-2007-0348...

KLA10247 Vulnerability in MailMArshal SMTP

An unspecified vulnerability was found in MailMarshal SMTP. By exploiting this vulnerability malicious users can modify arbitrary account information. This vulnerability can be exploited remotely via a specially designed UserId variable. Original advisories - Related products M86-MailMarshal-SMTP...

KLA10350 Vulnerabilities in Symantec

Unspecified vulnerabilities were found in Symantec AntiVirus. By exploiting these vulnerabilities malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited remotely via specially designed CAB or RAR archives. Original advisories Symantec bulletin...

KLA10057 ACE vulnerability in Servant Salamander

A buffer overflow vulnerability was found in Servant Salamander. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to peviewer.spl via a specially designed PE file. Original advisories vulnerability...

KLA10425 ACE vulnerability in yEnc32

A buffer overflow was found in yEnc32. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed NTX file. Original advisories - Related products yEnc32 CVE list CVE-2007-2646 high Solution Update to latest...

KLA10118 DoS vulnerability in Clam Anti-virus

An unspecified vulnerability was found in Clam Anti-virus. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the OLE2 parser via a specially designed file.. Original advisories Message with vulnerability...

KLA10224 DoS vulnerability in Ws FTP

An unspecified vulnerability was found in WS FTP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products WSFTP-LE CVE list CVE-2007-2213 high Solution Update to latest...

KLA10412 ACE vulnerability in ZoneAlarm

A lack of argument validation was found in ZoneAlarm. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited locally via specially designed arguments. Original advisories - Related products ZoneAlarm-Pro...

KLA10234 Multiple vulnerabilities in Kaspersky products

Multiple critical vulnerabilities have been found in Kaspersky Anti-Virus and Kaspersky Internet Security. Malicious users can exploit these vulnerabilities to execute arbitrary code or read & overwrite local files. Below is a complete list of vulnerabilities 1. An integer overflow can be exploit...

KLA10093 Multiple vulnerabilities in CA software

Multiple serious vulnerabilities have been found in ARCserve Backup. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via specially designed RPC...

KLA10178 DoS vulnerability in Google Earth

A buffer overflow was found in Google Earth. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed file. Original advisories - Related products Google-Earth CVE list CVE-2006-7157 high Solution Update to...

KLA10122 SB vulnerability in Comodo Firewall Pro

An unspecified vulnerability was found in Comodo Firewall Pro. By exploiting this vulnerability malicious users can bypass the driver protection for registry keys. This vulnerability can be exploited locally at a point related to OLE NamedPipe. Original advisories - Related products...

KLA10239 Multiple vulnerabilities in KIWI CatTools

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Below is a complete list of vulnerabilities 1. A directory traversal vulnerability can be...

KLA10252 ACE vulnerability in multiple software

A buffer overflow was found in multiple products, exploiting NCTAudioFile2.AudioFile. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed call. Original advisories - Related products...

KLA10293 Multiple vulnerabilities in PentaWare

Multiple serious vulnerabilities have been found in PentaWare. Malicious users can exploit these vulnerabilities to cause denial of service or extract files to an arbitrary directory. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely via a specially designed...

KLA10143 ACE vulnerability in EF Commander

A buffer overflow was found in EF Commander. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ISO or user assistance. Original advisories - Related products EF-Commander CVE list CVE-2007-0180 high...

KLA10032 Multiple vulnerabilities in Adobe Acrobat & Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat & Reader. Malicious users can exploit these vulnerabilities to cause denial of service or remotely execute arbitrary code. Below is a complete list of vulnerabilities: 1. Vectors related to rendering can be exploited to overwrite a...

KLA10160 Multiple vulnerabilities in First Response

Multiple serious vulnerabilities have been found in First Response. Malicious users can exploit these vulnerabilities to cause denial of service or hijack user packets. Below is a complete list of vulnerabilities 1. Non-exclusive socket mode can be exploited locally; 2. Vectors related to FRAgent...

KLA10367 Vulnerability in Toshiba Bluetooth Stack

An unspecified vulnerability was found in Toshiba Bluetooth Stack. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited remotely. Original advisories - Related products Toshiba-Bluetooth-Stack CVE list CVE-2006-5611 critical Solution Updat...

KLA10195 LPE vulnerability in HP VCA

Unspecified vulnerability was found in HP VCA. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely by unknown vectors. Original advisories - Related products HP-Version-Control-Agent CVE list CVE-2006-5300 high Solution Update to late...

KLA10390 LPE vulnerability in WebAdmin

An nspecified vulnerability was found in WebAdmin. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via mailbox manipulations. Original advisories - Related products WebAdmin CVE list CVE-2006-4620 warning Solution Update to latest...

KLA10230 DoS vulnerability in J River Media Center

A buffer overflow was found in J River Media Center. By exploiting this vulnerability malicious users can cause denial of service and possible execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories Forum topic securityfocus Related...

KLA10125 ACE vulnerability in Compression Plus

A buffer overflow was found in the Compression Plus library. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZOO file. Original advisories BeCubed changelog Related products Compression-Plus CVE lis...

KLA10040 RCE vulnerability in Adobe Download Manager

An unspecified vulnerability was found in Adobe Download Manager. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from network at a point related to a dm.ini file via a stack-based buffer overflow. Original advisories Adobe bulletin...

KLA10136 OSI vulnerability in DeviceLock

Improper ACL enforcing was found in DeviceLock. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited locally. Original advisories - Related products DeviceLock CVE list CVE-2006-4184 warning Solution Update to latest version Impact...

KLA10095 Vulnerability in CA Antivirus WebScan

An nnspecified vulnerability was found in CA Antivirus WebScan. By exploiting this vulnerability malicious users can c cause an undefined impact. This vulnerability can be exploited remotely. Original advisories - Related products CA-eTrust-Antivirus-WebScan-ActiveX-Control CVE list CVE-2006-3977...

KLA10221 ACE vulnerability in Proset

An unspecified vulnerability was found in Proset Wireless. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed frames. Original advisories - Related products Intel-PROSet-Wireless-Software CVE list...

KLA10251 DoS vulnerability in Clearswift MIMEsweeper

An unspecified vulnerability was found in Clearswift MIMEsweeper. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed RAR file. Original advisories - Related products MIMEsweeper-for-Web CVE list...

KLA10416 ACE vulnerability in eBay Enhanced Picture Services

A buffer overflow was found in eBay Enhanced Picture Services. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed HTML Original advisories - Related products...

KLA11446 SB vulnerability in WinSCP

Argument injection vulnerability was found in WinSCP. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Older Versions Related products WinSCP CVE list CVE-2006-3015 high Solution Update to the latest version Download WinSCP Impacts SB Security...

KLA10398 Vulnerability in NetMeeting

An unspecified vulnerability was found in Microsoft NetMeeting. By exploiting this vulnerability malicious users can cause denial of service and possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed input. Original advisories - Related products...

KLA10096 ACE vulnerability in CAM UnZip

A buffer overflow was found in CAM UnZip. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZIP archive. Original advisories - Related products CAM-UnZip CVE list CVE-2006-2161 high Solution Update to...

KLA10173 DoS vulnerability in Gene6 FTP Server

A buffer overflow was found in Gene6 FTP Server. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products Gene6-FTP-Server CVE list...

KLA10147 ACE vulnerabilities in EMC Retrospect

Improper privileges and permissions work was found in EMC Retrospect. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally by replacing program files or manipulating ‘open file’ dialog. Original advisories - Related products...

KLA10338 ACE vulnerability in SpeedProject

Buffer overflows were found in SpeedProject products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE file. Original advisories - Related products Speedproject-SpeedCommander Speedproject-Squeez...

KLA10086 CI vulnerability in Avant Browser

An unspecified vulnerability was found in the Avant browser. By exploiting this vulnerability malicious users can inject command line arguments. This vulnerability can be exploited remotely with user assistance via a specially designed ‘mailto:’ link. Original advisories - Related products...

KLA10144 DoS vulnerability in Secure FTP

An unspecified vulnerability was found in the Secure FTP Server. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network via a specially designed custom command Original advisories - Related products...

KLA10310 ACE vulnerability in RealNetworks

A buffer overflow was found in RealNetworks products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed SWF file. Original advisories RealNetworks bulletin Related products RealPlayer Rhapsody...