CVE-2011-3950

The diracdecodedataunit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number...

APPLE-SA-2013-09-20-1 Apple TV 6.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-09-20-1 Apple TV 6.0 Apple TV 6.0 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: Viewing a maliciously crafted PDF file may lead to an unexpected application termination or...

Apple iOS ‘openSharedCacheFile’函数基于栈的缓冲区溢出漏洞

CVE-2013-3950 Apple iOS是美国苹果（Apple）公司为移动设备所开发的操作系统。支持的设备包括iPhone、iPod Touch、iPad、Apple TV。 Apple iOS 5.1.x版本和6.x至6.1.3版本中的dyld中的dyld.cpp中的‘openSharedCacheFile’函数中存在基于栈的缓冲区溢出漏洞。攻击者可通过DYLDSHAREDCACHEDIR环境变量中较长的字符串利用该漏洞实施越狱攻击。 0 Apple iOS 5.1.x Apple iOS 6.x Apple iOS 6.1.3...

CVE-2013-3950

CVE-2013-3950 is a stack-based buffer overflow in the openSharedCacheFile function of dyld in Apple iOS. The vulnerability affects dyld in iOS 5.1.x and 6.x up to 6.1.3 and is triggered by a long string in the DYLD_SHARED_CACHE_DIR environment variable, enabling untethering attacks if exploited. ...

CVE-2012-3950

CVE-2012-3950 affects Cisco IOS Software’s Intrusion Prevention System (IPS) in IOS versions 12.3–12.4 and 15.0–15.2. In certain enabled-category configurations with missing signatures, a remote, unauthenticated attacker can cause a denial-of-service by sending DNS packets, potentially reloading ...

Secunia Research: Microsoft Office Document Imaging Endian Conversion Vulnerability

====================================================================== Secunia Research 14/12/2010 - Microsoft Office Document Imaging Endian Conversion Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Office TIFF Image Converter内存破坏漏洞(MS10-098)

BUGTRAQ ID: 45285 CVE ID: CVE-2010-3950 Microsoft Office是非常流行的办公软件套件。 Microsoft Office处理包含畸形结构数据的TIFF图形文件时存在漏洞，攻击者可利用此漏洞通过诱使用户打开恶意Office文件以当前登录的用户身份执行任意代码或造成拒绝服务。 Microsoft Office XP SP3 Microsoft Works 9.0 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-098）以及相应补丁: MS10-098：Vulnerabilities...

CVE-2010-3950

The CVE-2010-3950 issue affects Microsoft Office XP SP3, Office Converter Pack, and Works 9, where the TIFF Image Converter in the graphics filters mishandles TIFF data during endian conversion, causing memory corruption. This leads to remote code execution or a crash via a crafted TIFF image emb...

CVE-2009-3950

Bractus SunTrack is affected by CVE-2009-3950, which has multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML through input fields across several pages: the title parameter in newprofile.html; the firstname, lastname, and company parameters in sig...

Gentoo Security Advisory GLSA 200708-11 (lighttpd)

The remote host is missing updates announced in advisory GLSA 200708-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200708-11 (lighttpd)

The remote host is missing updates announced in advisory GLSA 200708-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3950

Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...

CVE-2008-3950

Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...

CVE-2008-3950

The CVE is based on a real DoS vulnerability in WebKit used by Safari on iPhone/iPod touch (versions 1.1.4 and 2.0). The issue is an off-by-one in _web_drawInRect:withFont:ellipsis:alignment:measureOnly: triggered by a crafted alert() string with a length that is a multiple of the 4096-byte memor...

CORE-2008-0126: iPhone Safari JavaScript alert Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ iPhone Safari JavaScript alert Denial of Service 1. Advisory Information Title: iPhone Safari JavaScript alert Denial of Service Advisory ID: CORE-2008-0603 Advisory...

CVE-2008-3950

creationtimestamp| type| source ---|---|--- 2008-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32341...

Debian Security Advisory DSA 1362-1 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1362-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian Security Advisory DSA 1362-1 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1362-1. OpenVAS Vulnerability Test $Id: deb13621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1362-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

openSUSE 10 Security Update : lighttpd (lighttpd-3985)

Multiple bugs in lighttpd allowed remote attackers to crash lighttpd, circumvent access restricions or even execute code. CVE-2007-3946, CVE-2007-3947, CVE-2007-3948, CVE-2007-3949, CVE-2007-3950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2007-3950

lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving the use of incompatible format specifiers in certain debugging messages in the 1 modscgi, 2 modfastcgi, and 3 modwebdav modules...