Apple iTunes PLS File Parsing Buffer Overflow (CVE-2009-2817)

Apple iTunes is a multimedia player that supports a wide range of media formats. One of the file formats supported by Apple iTunes is the PLS file format. PLS is a computer file format that stores multimedia playlists. A buffer overflow vulnerability has been reported in Apple iTunes. The error i...

Trellian FTP 'PASV' Response Buffer Overflow Vulnerability

This host is installed with Trellian FTP and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodtrellianftpbofvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Trellian FTP 'PASV' Response Buffer Overflow Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010...

JustSystems Ichitaro Products 'RTF' Buffer Overflow Vulnerability

JustSystems Ichitaro products is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JustSystems Ichitaro Products 'RTF' Buffer Overflow Vulnerability

This host is installed with JustSystems Ichitaro products and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodjustsystemsichitaroprdtsbofvuln.nasl 6515 2017-07-04 11:54:15Z cfischer $ JustSystems Ichitaro Products 'RTF' Buffer Overflow Vulnerability Authors: Madhu...

tiff -- buffer overflow vulnerability

Kevin Finisterre reports: Multiple integer overflows in the handling of TIFF files may result in a heap buffer overflow. Opening a maliciously crafted TIFF file may lead to an unexpected application termination or arbitrary code execution. The issues are addressed through improved bounds checking...

Apple QuickTime H.264 Movie File Buffer Overflow (CVE-2009-2799)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...

Beatport Player '.m3u' File Buffer Overflow Vulnerability

This host is installed with Beatport Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbeatportplayerbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Beatport Player '.m3u' File Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbon...

Beatport Player '.m3u' File Buffer Overflow Vulnerability

Beatport Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple QuickTime genl Atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in QuickTimeMPEG.qtx and results when QuickTime...

Microsoft Windows '.ani' file Denial of Service vulnerability

The host has ANI parser in Microsoft Windows and is prone to denial of dervice vulnerability. OpenVAS Vulnerability Test $Id: secpodiedosvuln.nasl 5364 2017-02-20 13:26:07Z cfi $ Microsoft Windows '.ani' file Denial of Service vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

Apple Saferi multiple vulnerabilities (Mar10)

The host is running Apple Saferi and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplesafarimultvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Apple Safari multiple vulnerabilities Mar10 Authors: Madhuri D Updated By: Antu Sanadi on 2010-18-2010 Added the CVE and...

Microsoft TCP IP Selective Acknowledgement Denial of Service (MS10-009; CVE-2010-0242)

TCP/IP SACK is used for connections with large TCP window sizes. When SACK is enabled, if a packet or series of packets is dropped the receiver can inform the sender of exactly which data has been received and where the holes in the data are. The sender can then selectively retransmit the missing...

Sun Java Web Start Charset Encoding Stack Buffer Overflow (CVE-2008-1188)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety of programs that are deployed on personal computers as well as embedded devices and cell phones. Java is...

Update Protection against Microsoft Windows ICMPv6 Router Advertisement Vulnerability (MS10-009)

A remote code execution vulnerability exists in the Windows TCP/IP stack due to insufficient bounds checking when processing specially crafted ICMPv6 Router Advertisement packets. An anonymous attacker could exploit the vulnerability by sending specially crafted ICMPv6 Router Advertisement packet...

Out-of-bounds

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6...

Design/Logic Flaw

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route...

Dnsmasq TFTP Service Remote Heap Buffer Overflow (CVE-2009-2957)

Dnsmasq is a lightweight DNS forwarder and DHCP server, designed to provide DNS and optionally DHCP services to a small-scale network. Dnsmasq supports static and dynamic DHCP leases and BOOTP/TFTP/PXE for network booting of diskless machines. It includes a secure, read-only, TFTP server to allow...

Microsoft Office PowerPoint Viewer TextBytesAtom Record Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office PowerPoint Viewer. User interaction is required to exploit this vulnerability in that the target must open a malicious presentation. The specific flaw exists in the handling of...

Apple QuickTime FlashPix File Buffer Overflow (CVE-2009-2798)

Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the image file formats supported by QuickTime is the FlashPix image format. A heap buffer overflow...

Microsoft Windows Embedded OpenType Font Heap Buffer Overflow (MS09-029; CVE-2009-0231)

Embedded OpenType EOT fonts are a compact form of OpenType fonts designed by Microsoft for use as embedded fonts on web pages. These files usually use the extension ".eot". The Embedded OpenType EOT Font Engine is a Microsoft Windows component that enables Windows applications, such as Microsoft...