143 matches found
CVE-2009-0747
The ext4isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the isizehigh structure member during operations on arbitrary types of files, which allows local users to cause a denial of service CPU consumption and error-message flood by...
CVE-2009-0747
The CVE-2009-0747 issue affects the Linux kernel’s ext4_isize helper in fs/ext4/ext4.h, exposing a denial-of-service risk when a local user mounts a crafted ext4 filesystem. The vulnerability arises from using the i_size_high structure member during operations on arbitrary file types, potentially...
FreeBSD Ports: apache
The remote host is missing an update to the system as announced in the referenced advisory. VID 4d49f4ba-071f-11d9-b45d-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0747
The CVE-2008-0747 entry describes a stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier. The vulnerability allows user-assisted remote attackers to execute arbitrary code via a long URL in a .asx file. Root cause is a overflow in processing the URL data, leading to potential a...
Debian Security Advisory DSA 1095-1 (freetype)
The remote host is missing an update to freetype announced via advisory DSA 1095-1. Several problems have been discovered in the FreeType 2 font engine. The Common vulnerabilities and Exposures project identifies the following problems: CVE-2006-0747 Several integer underflows have been discovere...
Ubuntu 5.04 / 5.10 / 6.06 LTS : freetype vulnerabilities (USN-291-1)
Several integer overflows have been discovered in the FreeType library. By tricking a user into installing and/or opening a specially crafted font file, these could be exploited to execute arbitrary code with the privileges of that user. Note that Tenable Network Security has extracted the...
CVE-2007-0747
CVE-2007-0747 affects Apple Mac OS X 10.3.9–10.4.9 where load_webdav fails to properly clean the environment when mounting a WebDAV filesystem, enabling a local user to gain elevated privileges by manipulating environment variables. The issue is described across multiple sources (NVD, CERT/US-CER...
RHEL 2.1 / 3 / 4 : freetype (RHSA-2006:0500)
Updated freetype packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, and portable font engine. Chris Evans discovered several...
freetype security update
CentOS Errata and Security Advisory CESA-2006:0500-01 Updated freetype packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, an...
CVE-2006-0747
CVE-2006-0747 concerns the FreeType font engine. The public details in the initial document describe an integer underflow in FreeType before 2.2 triggered by a font file with an odd number of blue values, causing a crash (denial of service) when the value is decremented by 2 in a context assuming...
CVE-2005-0747
ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp...
Fedora Core 2 : httpd-2.0.51-2.7 (2004-313)
Tue Sep 21 2004 Joe Orton 2.0.51-2.7 - aprgetlinecore fix from Rici Lake - Tue Sep 21 2004 Joe Orton 2.0.51-2.6 - fix 2.0.51 regression in Satisfy merging CVE-2004-0811 - Thu Sep 16 2004 Joe Orton 2.0.51-2.5 - modssl: prevent SIGHUP-triggers-SIGSEGV after upgrade from 2.0.50 - revert...
CVE-2004-0747
CVE-2004-0747 describes a local buffer overflow in Apache HTTP Server versions 2.0.50 and earlier, triggered by expansion of environment variables in .htaccess or server configuration files. The underlying issue involves copying environment data into a fixed-size buffer (ap_resolve_env) via strin...
CVE-2000-0747
The CVE-2000-0747 entry concerns OpenLDAP prior to version 1.2.11 on Conectiva Linux. The issue arises from the logrotate script sending an improper signal to the kernel log daemon (klogd), which results in klogd being killed. The available records describe the vulnerable component as the logrota...
CVE-2000-0747
The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon klogd and kills it...
CVE-2003-0747
wgate.dll in SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters 1 service, 2 templatelanguage, 3 language, 4 theme, or 5 template, which leaks the...
CVE-2003-0747
CVE-2003-0747 affects SAP Internet Transaction Server (ITS) 4620.2.0.323011 via its wgate.dll. The vulnerability arises from incorrect parameters (~service, ~templatelanguage, ~language, ~theme, ~template) that cause error messages to leak potentially sensitive information, including directory st...
CVE-2003-0747
wgate.dll in SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters 1 service, 2 templatelanguage, 3 language, 4 theme, or 5 template, which leaks the...
CVE-2002-0747
CVE-2002-0747 affects AIX 4.3.3 with a buffer overflow in the lsmcode component. The underlying cause is a buffer overflow, with impact stated as complete for confidentiality, integrity, and availability. The provided documents confirm the vulnerability but do not specify affected subversions, ex...