openSUSE Security Update : bogofilter (openSUSE-SU-2010:0439-1)

This update of bogofilter/bogolexer fixes a heap based buffer underflow vulnerability which could be exploited to cause a denial of service or potentially execute arbitrary code CVE-2010-2494. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in 1 bogofilter and 2 bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service heap memory corruption and application crash via an e-mail message with invalid base64 data that begins with an = equals...

CVE-2010-2494

CVE-2010-2494 describes a heap corruption/DoS in bogofilter’s base64 decoder (bogofilter and bogofilter-bogolexer) when processing invalid base64 data starting with =. Public docs show this was addressed by upgrades: bogofilter 1.2.3 (and related fixes for base64 decoding) and OpenSUSE/SuSE advis...

CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in 1 bogofilter and 2 bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service heap memory corruption and application crash via an e-mail message with invalid base64 data that begins with an = equals...

CVE-2010-2494

Multiple buffer underflows in the base64 decoder in base64.c in 1 bogofilter and 2 bogolexer in bogofilter before 1.2.2 allow remote attackers to cause a denial of service heap memory corruption and application crash via an e-mail message with invalid base64 data that begins with an = equals...

VideoLAN Client (VLC) Win32 smb:// URI Buffer Overflow

$Id: vlcsmburi.rb 8475 2010-02-13 06:58:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft ATL Multiple ActiveX Remote Code Executions (MS09-037; CVE-2008-0020; CVE-2009-2493; CVE-2009-2494)

The Active Template Library ATL is a set of template-based C++ classes that simplify the programming of Component Object Model COM objects. Multiple remote code execution vulnerabilities have been reported in the Microsoft ATL. The vulnerabilities are due to an error in the Load method of the...

iDefense Security Advisory 08.11.09: Multiple Vendor Microsoft ATL/MFC ActiveX Type Confusion Vulnerability

iDefense Security Advisory 08.11.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 11, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

CVE-2009-2494

The Active Template Library ATL in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant from a stream and...

CVE-2009-2494

Microsoft ATL (Active Template Library) in Windows platforms vulnerable to remote code execution due to an erroneous free operation after reading a variant from a stream and deleting it (ATL Object Type Mismatch). Affected products include Windows XP/2000/2003/Vista/Server editions as listed in M...

Microsoft活动模板库对象类型不匹配远程代码执行漏洞（MS09-037）

BUGTRAQ ID: 35982 CVECAN ID: CVE-2009-2494 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的活动模板库（ATL）头可能允许从数据流中读取变量而通过无效变量读取变量类型，导致在删除变量时可能会释放攻击者所控制的非预期内存区。如果用户加载了恶意网站上的特制组件或控件，这个漏洞可以允许远程执行代码。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows X...

MS09-037: Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution (973908)

The remote Windows host contains a version of the Microsoft Active Template Library ATL, included as part of Visual Studio or Visual C++, that is affected by multiple vulnerabilities : - A remote code execution issue affects the Microsoft Video ActiveX Control due to the a flaw in the function...

Stack overflow

Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494...

CVE-2008-2494

CVE-2008-2494 describes a cross-site scripting (XSS) vulnerability in Zina 1.0 RC3, specifically in index.php, where an attacker can inject arbitrary web script or HTML through the l parameter. The connected records corroborate the issue as XSS affecting Zina 1.0 RC3; no explicit exploit details,...

CVE-2007-2494

CVE-2007-2494 concerns the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3, where multiple stack-based buffer overflows can be triggered by long property values (DoOleCommand, FTPDownloadFile, FTPUploadFile, HttpUploadFile, Save, SaveWebFile, HttpDownloadFile, Open, OpenWebFile). Th...

CVE-2007-2494

Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 Save, 6 SaveWebFile, 7...

kdebase security update

CentOS Errata and Security Advisory CESA-2006:0582 Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop...

RHEL 4 : kdebase (RHSA-2006:0582)

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

Low: Red Hat Security Advisory: kdebase security fix

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

CVE-2006-2494

CVE-2006-2494 is a stack-based buffer overflow in IntelliTamper 2.07 that allows remote code execution via a crafted .map file. Related entries (CVE-2008-5755, CVE-2008-3360) describe similar issues tied to IntelliTamper 2.07/2.08 with MAP files containing long URLs, indicating a potential relate...