CVE-2010-0135

Heap-based buffer overflow in the WordPerfect 5.x reader wosr.dll, as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."...

Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2008-0135

creationtimestamp| type| source ---|---|--- 2009-12-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10639...

Mandriva Security Advisory MDVSA-2009:030-1 (amarok)

The remote host is missing an update to amarok announced via advisory MDVSA-2009:030-1. OpenVAS Vulnerability Test $Id: mdksa20090301.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:030-1 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

openSUSE Security Update : amarok (amarok-436)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

openSUSE Security Update : amarok (amarok-436)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

ESX Service Console update for krb5

a. Service Console package krb5 updateKerberos is a network authentication protocol. It is designed toprovide strong authentication for client/server applications byusing secret-key cryptography.An input validation flaw in the asn1decodegeneraltime function inMIT Kerberos 5 before 1.6.4 allows...

VMSA-2009-0008:ESX Service Console update for krb5

VMSA-2009-0008.2 ESX Service Console update for krb5 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0008.2 VMware Security Advisory Synopsis: ESX Service Console update for krb5 VMware Security Advisory Issue date: 2009-06-30 VMware Security Advisory Updated on: 2009-08-...

FreeBSD Ports: amarok

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GLSA-200903-34 : Amarok: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200903-34 Amarok: User-assisted execution of arbitrary code Tobias Klein has discovered multiple vulnerabilities in Amarok: Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp trigge...

Ubuntu USN-739-1 (amarok)

The remote host is missing an update to amarok announced via advisory USN-739-1. OpenVAS Vulnerability Test $Id: ubuntu7391.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7391.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-739-1 amarok Authors: Thomas Rein...

Ubuntu USN-737-1 (libsoup)

The remote host is missing an update to libsoup announced via advisory USN-737-1. OpenVAS Vulnerability Test $Id: ubuntu7371.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7371.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-737-1 libsoup Authors: Thomas...

Ubuntu USN-735-1 (gst-plugins-base0.10)

The remote host is missing an update to gst-plugins-base0.10 announced via advisory USN-735-1. OpenVAS Vulnerability Test $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7351.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-735-1...

Mandrake Security Advisory MDVSA-2009:030 (amarok)

The remote host is missing an update to amarok announced via advisory MDVSA-2009:030. OpenVAS Vulnerability Test $Id: mdksa2009030.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:030 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

openSUSE 10 Security Update : amarok (amarok-5932)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

Fedora Core 9 FEDORA-2009-0715 (amarok)

The remote host is missing an update to amarok announced via advisory FEDORA-2009-0715. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-0715 (amarok)

The remote host is missing an update to amarok announced via advisory FEDORA-2009-0715. OpenVAS Vulnerability Test $Id: fcore20090715.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0715 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Debian Security Advisory DSA 1706-1 (amarok)

The remote host is missing an update to amarok announced via advisory DSA 1706-1. OpenVAS Vulnerability Test $Id: deb17061.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1706-1 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-0135

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio .aa file with a large 1 nlen or 2 vlen Tag value, each of which triggers a heap-based buffer...

CVE-2009-0135

CVE-2009-0135 affects Amarok 1.4.10–2.0.1 via integer overflow in Audible::Tag::readTag when parsing Audible Audio (.aa) tags, triggering a heap overflow and remote code execution. Multiple connected advisories (Mandriva MDVSA-2009:030-1, openSUSE amarok-436, Ubuntu USN-739-1, SUSE/Security updat...