Ivan Fratric's Security Blog
Wednesday, October 15, 2008
Internet Explorer 6 componentFromPoint() remote memory disclosure and remote code execution
›
There is a bug in Internet Explorer 6 JavaScript implementation enabling remote memory disclosure and remote code execution. The vulnerabili...
11 comments:
Wednesday, September 10, 2008
Windows GDI+ GIF memory corruption
›
There is a memory corruption vulnerability in GIF file processing in Microsoft GDI+ that can be used to crash a vulnerable application and p...
76 comments:
Saturday, April 7, 2007
PHP <= 5.2.1 wbmp file handling integer overflow
›
There is an integer overflow in PHP in ext/gd/libgd/wbmp.c in the function readwbmp. If large enough values are specified for wbmp image hei...
927 comments:
Wednesday, April 4, 2007
Several Windows image viewers vulnerabilities
›
Table of contents 1. Introduction 2. Description of experiments 3. Image viewers 4. Experimental results 5. Concluding remarks Appendix I - ...
330 comments:
Tuesday, March 20, 2007
Web Wiz Forums 8.05 (MySQL version) SQL Injection
›
There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerabil...
21 comments:
Saturday, March 3, 2007
WordPress source code compromised to enable remote code execution
›
While assessing the security of WordPress, a popular blog creation software, I have discovered that it's source code has recently been c...
465 comments:
‹
Home
View web version