DEBIAN-CVE-2014-9378

Ettercap 0.8.1 does not validate certain return values, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted 1 name to the parseline function in mdnsspoof/mdnsspoof.c or 2 base64 encoded password to the dissectorimap function in...

PT-2014-8973

Name of the Vulnerable Software and Affected Versions Ettercap version 0.8.1 Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code. This can be achieved by sending a crafted name to the parse line function in mdns spoof/mdns spoof.c or a...

PT-2016-3507

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue concerns the t42 parse encoding function in type42/t42parse.c, which does not properly update the current position for immediates-only mode. This allows remote attackers to cause a denial ...

PT-2015-4333

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the bdf parse glyphs function in bdf/bdflib.c, which does not properly handle a missing ENDCHAR record. This can be exploited by remote attackers using a crafted BDF font,...

PT-2015-4345

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to an array index error in the parse fond function, which can be exploited by remote attackers to cause a denial of service or obtain sensitive information from process memory...

PT-2016-3506

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to several functions in FreeType, including t1 parse font matrix, cid parse font matrix, t42 parse font matrix, and ps parser load field, which do not check return values. This...

Microsoft Office Word Remote Code Execution Vulnerabilities (3009710)

This host is missing an important security update according to Microsoft Bulletin MS14-069. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

libX11: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XQueryFont, 2 XF86BigfontQueryFont, 3 XListFontsWithInfo, 4 XGetMotionEvents, 5 XListHosts, 6...

Updated perl-Email-Address packages fix security vulnerabilities

Updated perl-Email-Address package fixes security vulnerability: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

UBUNTU-CVE-2014-7187

Off-by-one error in the readtokenword function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have unspecified other impact via deeply nested for loops, aka the "wordlineno" issue...

PT-2018-10401 · Tinyxml2 +2 · Tinyxml2 +2

Name of the Vulnerable Software and Affected Versions: TinyXML2 version 6.2.0 Description: The issue is related to a heap-based buffer over-read in the XMLDocument::Parse function. However, the developers of TinyXML2 have determined that the reported issue is due to improper use of the library an...

UBUNTU-CVE-2014-5471

Stack consumption vulnerability in the parserockridgeinodeinternal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service uncontrolled recursion, and system crash or reboot via a crafted iso9660 image with a CL entry referring to a directory...

PT-2014-6495

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.16.1 Description The issue is related to a stack consumption problem in the parse rock ridge inode internal function, allowing local users to cause a denial of service through crafted iso9660 images. This can...

glibc - NUL Byte gconv_translit_find Off-by-One

glibc - NUL Byte gconvtranslitfind Off-by-One // // Full Exploit: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/34421.tar.gz CVE-2014-5119.tar.gz // // // --------------------------------------------------- // CVE-2014-5119 glibc gconvtranslitfind exploit //...

PT-2014-1700

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.0 through 1.0.0n OpenSSL versions 1.0.1 through 1.0.1i Description A race condition in the ssl parse serverhello tlsext function in OpenSSL, when multithreading and session resumption are used, allows remote SSL servers to...

PT-2014-5935

Name of the Vulnerable Software and Affected Versions sgminer versions prior to 4.2.2 cgminer versions prior to 4.3.5 BFGMiner versions prior to 4.1.0 Description The issue is related to multiple heap-based buffer overflows in the parse notify function. This can be triggered by remote pool server...

libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read

It was found that libvirt passes the XMLPARSENOENT flag when parsing XML documents using the libxml2 library, in which case all XML entities in the parsed documents are expanded. A user able to force libvirtd to parse an XML document with an entity pointing to a file could use this flaw to read t...

CVE-2014-0477

The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

CVE-2014-0477

The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

PT-2014-3647

Name of the Vulnerable Software and Affected Versions Email::Address module versions prior to 1.905 Description The issue concerns the parse function in the Email::Address module, which uses an inefficient regular expression. This inefficiency can be exploited by remote attackers to cause a denia...