[oCERT-2009-009] CamlImages integer overflows

2009-009 CamlImages integer overflows Description: CamlImages, an open source image processing library, suffers from several integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. The vulnerability is triggered by PNG image parsing, the...

Fedora Core 9 FEDORA-2009-2295 (psi)

The remote host is missing an update to psi announced via advisory FEDORA-2009-2295. OpenVAS Vulnerability Test $Id: fcore20092295.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2295 psi Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Update for fuse FEDORA-2007-2295

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-2295

CVE-2008-2295 describes a cross-site scripting (XSS) vulnerability in the web application component rg_search.php of Rgboard 3.0.12 (and possibly earlier versions). The issue allows remote attackers to inject arbitrary web script or HTML via the s_text parameter and other unspecified vectors, tak...

CVE-2002-2295

CVE-2002-2295 affects Pico Server (pServ) 2.0 beta 1–beta 5. The issue is a buffer overflow in the HTTP handling path, triggered by: (1) a 1024-byte TCP stream message (off-by-one overflow), (2) long method name, (3) long version number, (4) long User-Agent header, or (5) long file path. This can...

CVE-2007-2295

CVE-2007-2295 describes a heap-based buffer overflow in the QuickTime component JVTCompEncodeFrame used when processing malformed H.264 MOV files. Affected product: Apple QuickTime 7.1.5 and earlier versions up to 7.2. The underlying issue is insufficient bounds checking, which allows remote atta...

CVE-2006-2295

CVE-2006-2295 describes a directory traversal vulnerability in Dynamic Galerie 1.0. The flaw allows remote attackers to access arbitrary files by supplying an absolute path in the pfad parameter to (1) index.php or (2) galerie.php. The root cause is insufficient validation/sanitization of the pat...

CVE-2005-2295

NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service infinite loop via a packet with a zero datablock size...

CVE-2005-2295

CVE-2005-2295 affects NetPanzer 0.8 and earlier. A remote attacker can cause a denial of service by sending a packet with a zero datablock size, triggering an infinite loop. The provided sources describe the vulnerable component and impact but do not include exploits, specific versions beyond the...

Solaris 9 (sparc) : 115553-31

SunOS 5.9: USB Drivers and Framework Patch. Date this patch was last updated by Sun : Nov/04/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2002-2295

Buffer overflow in Pico Server pServ 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or 2 a long method name in an HTTP request, 3 a long...