OSVDB: Open Sourced Vulnerability Database

Creditee: Jean Pascal Pereira

Known Contact Information:

(as of 2012-07-12)

Known Affiliations:

0xffe4 (as of 2012-12-20)

Disclosed Vulnerabilities (23):

Disc. Date	OSVDB ID	CVEID	Title
2012-12-20	88539		Microsoft IE mshtml.dll Unclosed Tags Sequence Handling Overflow Arbitrary Code Execution
2012-12-10	88336		DIMIN Viewer GIF File Handling Overflow DoS
2012-12-10	88335		FreeVimager GIF File Handling Overflow DoS
2012-12-01	88363	2012-6301	Google Android Browser Crafted market: URI Handling DoS
2012-10-19	86776		Microsoft IE 9 File NULL Byte Handling XSS Filter Bypass
2012-10-11	86685	2012-5470	VLC Media Player Malformed PNG File Handling DoS
2012-10-10	86623	2012-5672	Microsoft Office Excel / Excel Viewer (Xlview.exe) XLS File Handling Arbitrary Code Execution
2012-10-09	86999		Arctic Torrent Torrent File Handling Memory Corruption DoS
2012-10-07	87042		FastStone Image Viewer GIF File Handling Overflow
2012-10-07	87041		HCView (Hardcoreview) GIF File Handling Overflow
2012-10-04	87040	2012-6307	JPEGsnoop JPEG File Handling Overflow
2012-10-02	86992		PhpTax drawimage.php icondrawpng() Function pfilez Parameter Remote Code Execution
2012-10-02	87233		soapbox Privileged Shell Invocation Local Privilege Escalation
2012-08-28	85936		CommPort signup.cgi SQL Injection
2012-08-28	85941		mieric addressBook no.pl SQL Injection
2012-07-17	84129		Forum Oxalis index.php id Parameter SQL Injection
2012-07-16	84104		DomsHttpd POST Data Handling Remote Overflow DoS
2012-07-12	83813	2012-6303	Snack Sound Toolkit generic/jkSoundFile.c GetWavHeader() Function WAV File Handling Memory Corruption
2012-06-20	83146		Commentics Multiple Admin Function CSRF
2012-06-20	83147		Commentics admin/index.php id Parameter XSS
2012-06-20	83148		Commentics admin/index.php id Parameter Traversal Arbitrary File Deletion
2012-05-11	82084		b2ePMS verify-user.php Multiple Field SQL Injection Authentication Bypass
2012-05-10	81817	2012-2922	Drupal index.php q[] Parameter Malformed Input Path Disclosure

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.