Touch22 Image22 ActiveX Control Buffer Overflow

Touch22 Image22 ActiveX is an application to create images for Microsoft Windows. A buffer overflow vulnerability has been discovered in Touch22 Image22 ActiveX. The vulnerability is due to an error in the application that fails to properly bounds check user-supplied data before copying it into a...

Mercury/32 <= v4.01b PH Server Module Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercury/32 %...

BSD (Multiple Distributions) - printf(3) Memory Corruption

BSD Multiple Distributions - printf3 Memory Corruption source: https://www.securityfocus.com/bid/36885/info Multiple BSD distributions are prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. An attacker can exploit this issue...

BSD (Multiple Distributions) - gdtoamisc.c Memory Corruption

BSD Multiple Distributions - gdtoamisc.c Memory Corruption source: https://www.securityfocus.com/bid/35510/info Multiple BSD distributions are prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. Attackers may exploit this iss...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-6068)

php 5.1.9 fixes among other things some security issues : - Missing bounds checks of an error in the imageRotate function of the gd extension potentially allowed attackers to read portions of memory CVE-2008-5498. - the mbstring.funcoverload in .htaccess was applied to other virtual hosts on th...

Fedora Core 10 FEDORA-2009-2903 (lcms)

The remote host is missing an update to lcms announced via advisory FEDORA-2009-2903. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-2910 (lcms)

The remote host is missing an update to lcms announced via advisory FEDORA-2009-2910. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeBSD Security Advisory (FreeBSD-SA-09:06.ktimer.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:06.ktimer.asc SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fedora Core 10 FEDORA-2009-2970 (lcms)

The remote host is missing an update to lcms announced via advisory FEDORA-2009-2970. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Ubuntu Update for mono vulnerability USN-553-1

Ubuntu Update for Linux kernel vulnerabilities USN-553-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5531.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mono vulnerability USN-553-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Debian DSA-1745-1 : lcms - several vulnerabilities

Several security issues have been discovered in lcms, a color management library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0581 Chris Evans discovered that lcms is affected by a memory leak, which could result in a denial of service via...

lcms security update

1.18-beta1.1.el53.2 - Add patch theoretically preventing division by zero 1.18-beta1.1.el53.1 - Rebase to upstream 1.18beta1 - CVE-2009-0581 LittleCms memory leak - CVE-2009-0723 LittleCms integer overflow - CVE-2009-0733 LittleCms lack of upper-bounds check on sizes - Resolves: 487513...

Design/Logic Flaw

smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted 1 trans, 2 trans2, and 3 nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed...

DEBIAN-CVE-2008-4314

smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted 1 trans, 2 trans2, and 3 nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed...

CVE-2008-4314

smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted 1 trans, 2 trans2, and 3 nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed...

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow source: https://www.securityfocus.com/bid/32313/info The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently...

[SECURITY] [DSA 1646-2] New squid packages fix array bounds check

------------------------------------------------------------------------ Debian Security Advisory DSA-1646-2 [email protected] http://www.debian.org/security/ Devin Carraway October 11, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1646-2] New squid packages fix array bounds check

------------------------------------------------------------------------ Debian Security Advisory DSA-1646-2 [email protected] http://www.debian.org/security/ Devin Carraway October 11, 2008 http://www.debian.org/security/faq -...

kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option

The sctpauthepsethmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTPAUTHHMACIDMAX, which...

[SECURITY] [DSA-1646-1] New squid packages fix array bounds check

------------------------------------------------------------------------ Debian Security Advisory DSA-1646-1 [email protected] http://www.debian.org/security/ Devin Carraway October 07, 2008 http://www.debian.org/security/faq -...