CVE-2009-2347

CVE-2009-2347 affects libtiff 3.8 through 4.0, where multiple integer overflows in inter-color spaces conversion tools enable context-dependent attackers to trigger a heap-based buffer overflow via TIFF images with large width/height. The overflow occurs in cvt_whole_image (tiff2rgba) and tiffcvt...

[oCERT-2009-012] libtiff tools integer overflows

2009-012 libtiff tools integer overflows Description: The libtiff image library tools suffer from integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. The libtiff package ships a library, for reading and writing TIFF, as well as a sma...

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow !/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 Overflow

!/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server TFTPDWIN = 0.4.2\n"; print " Universal Remote Buffer Overflow Exploi...

ProSysInfo TFTP server TFTPDWIN <= 0.4.2 Univ. Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================= ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility...

ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow

!/usr/bin/perl ProSysInfo TFTP server TFTPDWIN Greets fly to InTeL. WARNING: Author has no responsibility over the damage you do using this! use IO::Socket; use warnings; use strict; if!$ARGV0 print "x ProSysInfo TFTP server TFTPDWIN = 0.4.2\n"; print " Universal Remote Buffer Overflow...

CVE-2008-2347

creationtimestamp| type| source ---|---|--- 2008-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5650...

CVE-2007-2347

CVE-2007-2347 describes a PHP remote file inclusion vulnerability in OneClick CMS (aka Sisplet CMS)

Solaris 10 (sparc) : 119900-18 (deprecated)

GNOME 2.6.0: GNOME libtiff - library for reading and writing TIFF. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 119900 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2006-2347

The CVE-2006-2347 entry concerns E-Business Designer (eBD) 3.1.4 and earlier. The vulnerability allows remote attackers to reveal the web server’s full path by supplying special values (e.g., a single quote) to the id parameter in form_grupo.html or by requesting the archivos/ and files/ director...

CVE-2004-2404

CVE-2004-2404 is a duplicate of CVE-2004-2347. Connected records show that the affected product is Leif M. Wright Web Blog (versions 1.1 and 1.1.5). The vulnerability is remote command execution via shell metacharacters (e.g., |) in the file parameter of ViewFile requests, indicating improper han...

CVE-2004-2347

The CVE-2004-2347 entry applies to Leif M. Wright Web Blog (blog.cgi) versions 1.1 and 1.1.5. The vulnerability arises in the ViewFile request’s file parameter, where shell metacharacters (e.g., |) enable remote command execution. Impact is remote arbitrary commands executed with the web server u...

CVE-2004-2404

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2347. Reason: This candidate is a duplicate of CVE-2004-2347. Notes: All CVE users should reference CVE-2004-2347 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2347

...