all_windows Archives - CVE Vulnerability

CVE-2008-2161

Sun, 26 Feb 2023 09:09:22 +0000

Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet. NOTE: some of these details are obtained from third party information.

The post CVE-2008-2161 appeared first on CVE Vulnerability.

CVE-2007-3956

Sun, 26 Feb 2023 09:06:59 +0000

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534.

The post CVE-2007-3956 appeared first on CVE Vulnerability.

CVE-2007-3615

Sun, 26 Feb 2023 09:06:49 +0000

Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.

The post CVE-2007-3615 appeared first on CVE Vulnerability.

CVE-2007-3334

Sun, 26 Feb 2023 09:06:41 +0000

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.

The post CVE-2007-3334 appeared first on CVE Vulnerability.

CVE-2007-3341

Sun, 26 Feb 2023 09:06:41 +0000

Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to “see a valid memory address” via unspecified vectors, a different issue than CVE-2007-0217.

The post CVE-2007-3341 appeared first on CVE Vulnerability.

CVE-2007-2927

Sun, 26 Feb 2023 09:06:31 +0000

Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of service via a crafted 802.11 management frame.

The post CVE-2007-2927 appeared first on CVE Vulnerability.

CVE-2007-2896

Sun, 26 Feb 2023 09:06:30 +0000

Race condition in the Symantec Enterprise Security Manager (ESM) 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service (CPU consumption and application hang) via certain network scans to ESM ports.

The post CVE-2007-2896 appeared first on CVE Vulnerability.

CVE-2007-2414

Sun, 26 Feb 2023 09:06:17 +0000

MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors.

The post CVE-2007-2414 appeared first on CVE Vulnerability.

CVE-2007-2389

Sun, 26 Feb 2023 09:06:16 +0000

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers to read memory from a web browser via unknown vectors related to Java applets.

The post CVE-2007-2389 appeared first on CVE Vulnerability.

CVE-2007-1644

Sun, 26 Feb 2023 09:05:57 +0000

The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote attackers to change DNS records for a web proxy server and conduct man-in-the-middle (MITM) attacks on web traffic, conduct pharming attacks by poisoning DNS records, and cause a denial of service (erroneous name resolution).

The post CVE-2007-1644 appeared first on CVE Vulnerability.