Javier Garcia Di Palma

The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module. These vulnerabilities allow remote attackers to execute arbitrary web script or HTML within the Feeds interface context. The attack can be carried out via the `title` and `description` elements within an `item` element in an RSS feed.

The issue arises from improper validation of the origin of the configuration web page, specifically options2.html, which can be exploited by remote attackers to trick users into reconfiguring the toolbar by presenting disguised checkboxes.

The issue is related to a heap-based buffer overflow in the MCRegEx Search function. This allows remote attackers to execute arbitrary code via an inconsistent length field of a Message in a 0x2711 Type-Length-Value (TLV) type.

Name of the Vulnerable Software and Affected Versions: Microsoft NetMeeting version 3.01 2000 before SP4 Description: A directory traversal issue allows remote attackers to read arbitrary files via "...." (dot dot) sequences in a file transfer request. Recommendations: For Microsoft NetMeeting version 3.01 2000, apply Service Pack 4 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Microsoft NetMeeting version 3.01 2000 before SP4 Description: The issue allows remote attackers to cause a denial of service, specifically the shutdown of a NetMeeting conference, by sending malformed packets. This can be demonstrated via the chat conversation. Recommendations: For Microsoft NetMeeting version 3.01 2000 before SP4, apply Service Pack 4 to resolve the issue.