Buffer overflow

Buffer overflow in demuxers/demuxasf.c aka the ASF demuxer in the xineplugdmxasf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-16...

openSUSE 10 Security Update : apache2-mod_jk (apache2-mod_jk-4992)

Fixed various issues in tomcat : - CVE-2006-7196: Cross-site scripting XSS vulnerability in example JSP applications - CVE-2007-3382: Handling of cookies containing a ' character - CVE-2007-3385: Handling of ' in cookies - CVE-2007-5641: tomcat path traversal / information leak - CVE-2007-1860:...

CentOS 4 / 5 : gd (CESA-2008:0146)

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...

gd security update

CentOS Errata and Security Advisory CESA-2008:0146 Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics...

netpbm: GIF handling buffer overflow in giftopnm

Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...

Moderate: Red Hat Security Advisory: gd security update

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...

Debian: Security Advisory (DSA-1504-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 4 / 5 : gd (RHSA-2008:0146)

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...

SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 4990)

Cross-site scripting XSS vulnerability in example JSP applications. CVE-2006-7196 - Handling of cookies containing a ' character. CVE-2007-3382 - Handling of ' in cookies. CVE-2007-3385 - tomcat path traversal / information leak. CVE-2007-5641 - directory traversal. CVE-2007-1860 - tomcat https...

CVE-2006-7232

CVE-2006-7232 affects MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14. A remote authenticated user can crash the server by issuing an EXPLAIN SELECT FROM on INFORMATION_SCHEMA (demonstrated with ORDER BY). The root cause is in sql_select.cc handling of such queries. Remediation, as documented, ...

Debian DSA-1504-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-5823 LMH reported a potential local DoS which...

[SECURITY] [DSA 1504-1] New Linux kernel 2.6.8 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1504 [email protected] http://www.debian.org/security/ dann frazier February 22, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1503 [email protected] http://www.debian.org/security/ dann frazier February 22, 2008 http://www.debian.org/security/faq -...

DSA-1503-1 kernelimage-2.4.27 - several issues

Bulletin has no description...

Fedora 7 : graphviz-2.12-10.fc7 (2008-1643)

Rebuilt to utilize system gd instead of internal copy. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2006-7231

CVE-2006-7231 is an SQL injection vulnerability affecting Civica Software’s display.asp component, exploitable via the Entry parameter. The data indicates remote attackers could execute arbitrary SQL commands through this parameter, leading to potential data exposure or modification. The document...

citrix-overflow.txt

Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Design/Logic Flaw

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service memory exhaustion and device crash via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of...

Citrix Presentation Server Client - WFICA.OCX ActiveX Heap Buffer Overflow

Citrix Presentation Server Client - WFICA.OCX ActiveX Heap Buffer Overflow Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var...

Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit ==================================================================== Citrix Presentation Server Client...