150 matches found
Mozilla Foundation Security Advisory 2008-36
Mozilla Foundation Security Advisory 2008-36 Title: Crash with malformed GIF file on Mac OS X Impact: Critical Announced: July 16, 2008 Reporter: Drew Yao Products: Firefox 3 Fixed in: Firefox 3.0.1 Description Drew Yao of Apple Product Security reported a vulnerability in Mozilla graphics code...
CVE-2007-2934
CVE-2007-2934 is a directory traversal vulnerability in the skins/common.css.php component of Vistered Little 1.6a, allowing remote attackers to read arbitrary files by supplying a ".." in the skin parameter. The issue stems from improper handling of the skin parameter, enabling traversal outside...
USN-331-1: Linux kernel vulnerabilities
A Denial of service vulnerability was reported in iptables' SCTP conntrack module. On computers which use this iptables module, a remote attacker could expoit this to trigger a kernel crash. CVE-2006-2934 A buffer overflow has been discovered in the dvdreadbca function. By inserting a specially...
[Full-disclosure] rPSA-2006-0122-1 kernel
rPath Security Advisory: 2006-0122-1 Published: 2006-07-07 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Deterministic Denial of Service Updated Versions: kernel=/conary.rpath.com@rpl:devel//1/2.6.16.24-0.1-1 References:...
CVE-2006-2934
SCTP conntrack ipconntrackprotosctp.c in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service crash via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference ...
CVE-2006-2934
CVE-2006-2934 is a kernel-level DoS in SCTP conntrack (netfilter) for Linux kernels 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23, where a crafted packet without chunks can trigger a value bug leading to a NULL dereference and crash. The connected advisories reference upstream kernel patches...
CVE-2006-2934
SCTP conntrack ipconntrackprotosctp.c in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service crash via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference ...
CVE-2005-2934
CVE-2005-2934 describes a local privilege-escalation in SCO UnixWare 7.1.3 and 7.1.4 caused by a failure in the ptrace implementation to validate setuid permissions on traced binaries. This allows a local user to gain root privileges by attaching to a process via ptrace (exploitation described as...
