CVE-2010-1437

CVE-2010-1437 is a race condition in the Linux kernel’s keyring handling (find_keyring_by_name in security/keys/keyring.c) affecting version 2.6.34-rc5 and earlier. A local user can exploit this via keyctl session commands that access a dead keyring being deleted by key_cleanup, leading to memory...

CVE-2010-1437

Race condition in the findkeyringbyname function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via keyctl session commands that trigger access to a...

CVE-2009-1437

Stack-based buffer overflow in PortableApps CoolPlayer Portable aka CoolPlayer+ Portable 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist .m3u file. NOTE: this may overlap CVE-2008-3408...

CVE-2009-1437

The CVE-2009-1437 issue affects PortableApps CoolPlayer Portable (CoolPlayer+ Portable) up to version 2.19.6 and earlier, where a stack-based buffer overflow in handling .m3u playlist files allows remote code execution via a crafted long string in the playlist. Root cause is a boundary error whil...

CVE-2009-1437

Stack-based buffer overflow in PortableApps CoolPlayer Portable aka CoolPlayer+ Portable 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist .m3u file. NOTE: this may overlap CVE-2008-3408...

CVE-2009-1437

creationtimestamp| type| source ---|---|--- 2009-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8489 2009-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8519 2009-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8520...

Gentoo Security Advisory GLSA 200407-19 (Pavuk)

The remote host is missing updates announced in advisory GLSA 200407-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Microsoft恶意软件保护引擎多个拒绝服务漏洞(MS08-029)

BUGTRAQ ID: 29060,29073 CVECAN ID: CVE-2008-1437,CVE-2008-1438 Microsoft恶意软件保护引擎可为防病毒和反间谍软件客户端提供扫描、监测和清除功能。 Microsoft恶意软件保护引擎处理特制文件的方式中存在拒绝服务漏洞，攻击者可以通过建立特制文件来利用此漏洞，当目标计算机系统接收或Microsoft恶意软件保护引擎扫描到此文件时，就可能导致Microsoft恶意软件保护引擎停止响应和自动重新启动，或耗尽所有磁盘空间 0 Microsoft Windows Live OneCare Microsoft Antigen fo...

CVE-2008-1437

CVE-2008-1437 affects the Microsoft Malware Protection Engine (mpengine.dll) versions 1.1.3520.0 and 0.1.13.192 used in multiple Microsoft products. The vulnerability stems from the engine’s parsing of specially crafted files, involving improper validation during processing, which can cause the e...

MS08-029: Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service (952044)

The remote host is running a version of Windows Malware Protection engine that is vulnerable to a bug in the file handling routine which could allow an attacker to crash the protection engine. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid32313; scriptversion"1.24";...

Windows Executable (PE) Files (CVE-2008-1437; CVE-2010-0233)

The Microsoft Malware Protection Engine provides the scanning, detection and cleaning capabilities for the following antivirus and antispyware clients: Windows Live OneCare, Microsoft Forefront Security, Microsoft Antigen, and Windows Defender. A denial of service vulnerability has been reported ...

Debian: Security Advisory (DSA-1437-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CUPS SNMP后端asn1_get_string()函数远程栈溢出漏洞

BUGTRAQ ID: 26917 CVECAN ID: CVE-2007-5849 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理包含畸形数据的SNMP请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。...

CVE-2003-1437

BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access...

CVE-2003-1437

BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1 store passwords in plaintext when a keystore is used to store a private key or trust certificate authorities. This plaintext storage enables local users to gain access. The vulnerability affects the authentication/secret handling in the key...

CVE-2007-1437

Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution...

CVE-2007-1437

CVE-2007-1437 affects LedgerSMB prior to 1.1.5 and SQL-Ledger prior to 2.6.25. The vulnerability allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code by calling a custom error function that returns from executio...

CVE-2006-1437

The CVE-2006-1437 entry concerns UPOINT @1 Event Publisher where sensitive information is stored under the web document root with insufficient access control. This allows remote attackers to read private comments by requesting eventpublisher.txt directly. Concrete details present in connected reco...

CVE-2001-1437

Technical details about CVE-2001-1437 are not publicly available in the provided documents; monitor for updates.

CVE-2004-1437

CVE-2004-1437 : Multiple buffer overflows in Pavuk’s digest authentication implementation (versions up to and including 0.9.28-r2) allow remote attackers to execute arbitrary code. The issue is documented across multiple sources (NVD entry for CVE-2004-1437 and Gentoo GLSA 200407-19). The Gentoo ...