Debian DSA-1972-1 : audiofile - buffer overflow

Max Kellermann discovered a heap-based buffer overflow in the handling of ADPCM WAV files in libaudiofile. This flaw could result in a denial of service application crash or possibly execution of arbitrary code via a crafted WAV file. The old stable distribution etch, this problem will be fixed i...

[SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow

------------------------------------------------------------------------- Debian Security Advisory DSA-1972-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 17, 2010 http://www.debian.org/security/faq -...

CVE-2009-1972

CVE-2009-1972 affects Oracle Database Auditing: remote authenticated users could affect integrity via DBMS_SYS_SQL/DBMS_SQL in Oracle DB versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7. Root cause involves the Auditing component exposure in the Database and its SQL facilities. The v...

CVE-2008-1972

Exponent CMS 0.96.6-GA20071003 and earlier is affected by multiple XSS vulnerabilities in the user account creation feature when Allow Registration is enabled. Remote attackers can inject arbitrary web script or HTML via the (1) username, (2) firstname, (3) lastname, and (4) e-mail address fields...

CVE-2007-1972

CVE-2007-1972 affects BMC Performance Manager; PatrolAgent.exe on TCP port 3181 allows remote modification of configuration files without authentication by altering SNMP parameters (e.g., masterAgentName, masterAgentStartLine), purportedly enabling arbitrary code execution. The ZDI advisory detai...

CVE-2006-1972

CVE-2006-1972 is a cross-site scripting (XSS) vulnerability in Wingnut EasyGallery, specifically EasyGallery.php where the ordner parameter is not sanitized. The issue allows remote attackers to inject arbitrary web script or HTML, with the browser executing it in the context of the affected site...

CVE-2004-1972

CVE-2004-1972: SQL injection in PHP-Nuke Video Gallery Module 0.1 Beta 5 (modules.php) allows remote attackers to inject arbitrary SQL via clipid or catid parameters in viewclip, viewcat, or voteclip actions. Vulnerable component is the module’s handling of these parameters, enabling unauthorized...