196 matches found
GLSA-200503-15 : X.org: libXpm vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-15 X.org: libXpm vulnerability Chris Gilbert has discovered potentially exploitable buffer overflow cases in libXpm that weren't fixed in previous libXpm versions. Impact : A carefully-crafted XPM file could crash X.org,...
CVE-2005-0605
The CVE-2005-0605 issue concerns LibXPM’s scan.c where a negative bitmap_unit value can cause a buffer overflow, allowing arbitrary code execution. Connected sources confirm LibXPM involvement and link to patches/advisories; for Solaris SPARC, patch 119063-01 (libXpm patch) is cited as remediatio...
CVE-2005-0605
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmapunit value that leads to a buffer overflow...
CVE-2005-0605
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmapunit value that leads to a buffer overflow...
CVE-2004-0605
Non-registered IRC users using 1 ircd-hybrid 7.0.1 and earlier, 2 ircd-ratbox 1.5.1 and earlier, or 3 ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued...
CVE-2004-0605
Non-registered IRC users using 1 ircd-hybrid 7.0.1 and earlier, 2 ircd-ratbox 1.5.1 and earlier, or 3 ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued...
CVE-2004-0605
The CVE-2004-0605 entry applies to IRC daemons that fail to rate-limit non-registered users, causing a Denial of Service. Affected: ircd-hybrid <= 7.0.1, ircd-ratbox
CVE-2003-0605
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service crash, and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the RemoteGetClassObject interface that cause a NULL pointer to be passed to th...
CVE-2003-0605
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service crash, and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the RemoteGetClassObject interface that cause a NULL pointer to be passed to th...
CVE-2002-0605
CVE-2002-0605 describes a buffer overflow in the Macromedia Flash 6 Flash OCX (revision 6,0,23,0) that allows remote attackers to execute arbitrary code via a long movie parameter. The connected records corroborate: vulnerable component is the Flash OCX, with the overflow occurring when processin...
CVE-2002-0605
Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 6,0,23,0 allows remote attackers to execute arbitrary code via a long movie parameter...
CVE-2001-0605
Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld skins-data file which contains long strings of random data...
CVE-2001-0605
The CVE-2001-0605 issue affects Headlight Software MyGetright prior to version 1.0b. A remote attacker can upload and/or overwrite arbitrary files by delivering a malicious .dld (skins-data) file containing long strings of random data. The vulnerability is described with partial impacts to confid...
CVE-2000-0605
Summary: CVE-2000-0605 affects Blackboard CourseInfo 4.0. The vulnerability is that local and SQL administrator usernames/passwords are stored in cleartext in a registry key whose ACL allows other users to access the passwords. This leads to potential confidentiality exposure of admin credentials...