Opera 9 buffer overflow
Published:		22.06.2006
Source:		BUGTRAQ
SecurityVulns ID:		6280
Type:		client
Level:		6/10
Description:		Buffer overflow on oversized HREF.

Affected:

OPERA : Opera 9

Original document

N9_(at)_critical.lt, Opera 9 DoS PoC (22.06.2006)

Discuss:

Read or add your comments to this news (0 comments)

NetPBM pamtofits buffer overflow
Published:		22.06.2006
Source:		SECUNIA
SecurityVulns ID:		6284
Type:		client
Level:		5/10
Description:		Off-by-one buffer overflow on input file parsing.

Affected:

NETPBM : NetPBM 10.33

Original document

SECUNIA, [SA20729] NetPBM pamtofits Off-By-One Buffer Overflow Vulnerability (22.06.2006)

Discuss:

Read or add your comments to this news (0 comments)

WinAMP buffer overflow
Published:		22.06.2006
Source:		MILW0RM
SecurityVulns ID:		6285
Type:		client
Level:		7/10
Description:		Buffer overflow on MIDI files playing.

Files:		Exploits Winamp 5.21 - Midi Buffer Overflow in_midi.dll
Discuss:		Read or add your comments to this news (0 comments)

Multiple MailSweeper MIMESweeper mail filters security vulnerabilities
Published:		22.06.2006
Source:		SECUNIA
SecurityVulns ID:		6286
Type:		remote
Level:		6/10
Description:		DoS conditions, filtering bypass.

Affected:		CLEARSWIFT : MAILsweeper for SMTP 4.3
		CLEARSWIFT : MIMEsweeper for Exchange 4.3

Original document

SECUNIA, [SA20756] MAILsweeper for SMTP/Exchange Multiple Vulnerabilities (22.06.2006)

Discuss:

Read or add your comments to this news (0 comments)

MiMMS streaming media download utility buffer overflow
Published:		22.06.2006
Source:		SECUNIA
SecurityVulns ID:		6287
Type:		client
Level:		5/10
Description:		Buffer overflow on reading data from server.

Affected:

MIMMS : MiMMS 0.0

Original document

SECUNIA, [SA20749] MiMMS Media Stream Handling Buffer Overflow Vulnerabilities (22.06.2006)

Discuss:

Read or add your comments to this news (0 comments)

Jaguarsoft JEdit ActiveX information leak
Published:		22.06.2006
Source:		BUGTRAQ
SecurityVulns ID:		6283
Type:		client
Level:		5/10
Description:		It's possible to retrieve sensitive information about user's computer.

Original document

bulten_(at)_srlabs.net, JEdit ActiveX Control Information Disclosure vulnerability (22.06.2006)

Discuss:

Read or add your comments to this news (0 comments)

GnuPG memory corruption
Published:		22.06.2006
Source:		BUGTRAQ
SecurityVulns ID:		6279
Type:		client
Level:		5/10
Description:		Memory corruption on message packet with a large length.

Affected:		GNUPG : GnuPG 1.4
		GNU : GnuPG 1.9

Original document

MANDRIVA, [ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability (22.06.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		22.06.2006
Source:
SecurityVulns ID:		6282
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		CMSFAETHON : CMS Faethon 1.3
		SOMECHESS : Somechess 1.5
		CJGUESTBOOK : cjGuestbook 1.3
		MICROCMS : Micro CMS 0.3
		IDEABOX : IdeaBox 1.1

Original document		Kacper, IdeaBox <= 1.1 (gorumDir) Remote File Include Vulnerability (22.06.2006)
		CeNGiZ-HaN, Micro CMS <= 0.3.5 (microcms_path) Remote File Include Vulnerability (22.06.2006)
		Kw3rLn, Grayscale BandSite CMS <=([root_path]) Remote File Include Vulnerabilities (22.06.2006)
		Silitix, [Full-disclosure] Calendar ( Provided by Codewalkers ) - SQL Injection (22.06.2006)
		SECUNIA, [SA20713] CMS Faethon "mainpath" File Inclusion and Cross-Site Scripting Vulnerabilities (22.06.2006)
		:) :), Eduha Meeting php shell upload Vulnerabilities (22.06.2006)
		luny_(at)_youfucktard.com, cjGuestbook v1.3 - XSS (22.06.2006)
		luny_(at)_youfucktard.com, Somechess v1.5 rc1 - XSS (22.06.2006)

Files:		Ultimate PHP Board <= 1.96 GOLD Multiple Vulnerabilities Exploit
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Internet Explorer filtering protection bypass
Published:		22.06.2006
Source:		BUGTRAQ
SecurityVulns ID:		6288
Type:		client
Level:		6/10
Description:		For ASCII codepage 8-bit text is converted to 7-bit. It makes it possible to bypass content filters with 8-bit characters within ASCII encoded text.

Affected:

MICROSOFT : Internet Explorer 6.0

Original document		RSnake, Re: Bypassing of web filters by using ASCII (22.06.2006)
		Kurt Huwig, Bypassing of web filters by using ASCII (22.06.2006)

Discuss:

Read or add your comments to this news (0 comments)

Yahoo Messenger instant messenger agent DoS updated since 22.06.2006
Published:		28.07.2006
Source:		IVANIVAN
SecurityVulns ID:		6281
Type:		remote
Level:		6/10
Description:		Application crashes on message with malformed link. Vulnerability is known to be used in-the-wild.

Affected:		YAHOO : Yahoo Messenger 7.0
		YAHOO : Yahoo Messenger 7.5

Original document		Ivan Ivan, Yahoo messenger bug (28.07.2006)
		Ivan Ivan, Yahoo messenger bug (28.07.2006)
		Ivan Ivan, Yahoo messenger bug (22.06.2006)

Discuss:

Read or add your comments to this news (0 comments)