175 matches found
Debian DSA-1194-1 : libwmf - integer overflow
It was discovered that an integer overflow in libwmf, the library to read Windows Metafile Format files, can be exploited to execute arbitrary code if a crafted WMF file is parsed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CentOS 3 / 4 : nasm (CESA-2005:381)
An updated nasm package that fixes multiple security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM...
CVE-2006-1194
The CVE-2006-1194 entry concerns an integer signedness error in the ENet library’s enet_protocol_handle_incoming_commands (protocol.c) affecting CVS-version Jul 2005 and earlier. It is used by products including Cube, Sauerbraten, and Duke3d_w32. The flaw allows a remote attacker to cause an appl...
CVE-2003-1194
The vulnerability CVE-2003-1194 affects Booby up to version 0.2.3 (inclusive) and is a cross-site scripting flaw that allows an attacker to inject arbitrary web script or HTML via the error message. Affected software is Booby .1 through 0.2.3; the root cause is an XSS in error-output handling, en...
Low: Red Hat Security Advisory: nasm security update
An updated nasm package that fixes multiple security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM...
CVE-2004-1194
Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service application crash via a long nickname...
CVE-2004-1194
CVE-2004-1194 affects Star Wars Battlefront (1.11 and earlier). The vulnerability is a buffer overflow in the nickname handling component, leading to a remote DoS via a long nickname. Exploitation details are not provided beyond this description; no remediation details are present in the provided...
CVE-2002-1194
CVE-2002-1194 describes a buffer overflow in talkd on NetBSD 1.6 and earlier (and possibly other OSes), which could allow remote attackers to execute arbitrary code via a long inbound message. The available connected documents confirm the vulnerability exists in the talk daemon and the potential ...
CVE-2001-1194
Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with 1 an IP length less than actual packet size, or 2 fragmented packets whose size exceeds 64 kilobytes after reassembly...
CVE-2001-1194
CVE-2001-1194 affects Zyxel Prestige 681 and 1600 SDSL Routers. Remote attackers can cause a denial of service by sending malformed packets: (1) IP length shorter than the actual packet size, or (2) fragmented packets whose reassembly size exceeds 64 KB. Impact is denial of service/partial availa...
CVE-2001-1194
Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with 1 an IP length less than actual packet size, or 2 fragmented packets whose size exceeds 64 kilobytes after reassembly...
CVE-2000-1194
The provided documents describe CVE-2000-1194 affecting Argosoft FRP server 1.0. An attacker can remotely cause a denial of service and potentially execute arbitrary commands by sending an excessively long string in the USER or CWD commands, indicating a likely input handling/buffer issue. The en...
CVE-2000-1194
Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the 1 USER or 2 CWD commands...