3488 matches found
Ingres database / CA security products multiple security vulnerabilities
Multiple heap buffers overflows on TCP/10916 and TCP/10923 requests parsing. Local unauthorized files access with 'wakeup'. Buffer overflow in uuidfromchar SQL function, privilege escalation...
Ubuntu 6.06 LTS / 6.10 / 7.04 : gimp vulnerability (USN-480-1)
Stefan Cornelius discovered that Gimp could miscalculate the size of heap buffers when processing PSD images. By tricking a user into opening a specially crafted PSD file with Gimp, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network...
Design/Logic Flaw
Unspecified vulnerability in 1 SYS$EI1000.EXE and 2 SYS$EI1000MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service machine crash via an "oversize" packet, which is not properly discarded if "the device has no remaining buffers after receipt of the first buffe...
USN-525-1: libsndfile vulnerability
Robert Buchholz discovered that libsndfile did not correctly validate the size of its memory buffers. If a user were tricked into playing a specially crafted FLAC file, a remote attacker could execute arbitrary code with user privileges...
USN-514-1: X.org vulnerability
Aaron Plattner discovered that the Composite extension did not correctly calculate the size of buffers when copying between different bit depths. An authenticated user could exploit this to execute arbitrary code with root privileges...
Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities
Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplie...
T1lib - 'intT1_Env_GetCompletePath' Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/25079/info T1lib is prone to a buffer-overflow vulnerability because the library fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers. An attacker can exploit this issue to execute arbitrary machine cod...
Ipswitch IMail Server GetIMailHostEntry Memory Corruption Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Ipswitch IMail and ICS server. Authentication is not required to exploit this vulnerability. The specific flaw resides in IMailsec.dll while attempting to authenticate users. The affected component is use...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service kernel panic via unspecified vectors related to "memory buffers" of Secure Socket Layer SSL records...
CVE-2007-3470
Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service kernel panic via unspecified vectors related to "memory buffers" of Secure Socket Layer SSL records...
CVE-2007-3470
CVE-2007-3470 affects the Sun Solaris 10 KSSL kernel module when configured with the KSSL proxy. The report describes multiple unspecified vulnerabilities that can be triggered remotely to cause a denial of service (kernel panic) via unspecified vectors related to SSL record memory buffers. The p...
PHP 5.2 - EXT/Filter Function Remote Buffer Overflow
source: https://www.securityfocus.com/bid/22922/info PHP is prone to a remote buffer-overflow vulnerability because the application fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers. An attacker can exploit this issue to execute arbitrary...
security flaw
The copyfromuser function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that...
security flaw
The clipmkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service panic via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed freed pointer dereference...
[Full-disclosure] [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34870: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities CA Vulnerability ID CAID: 34870 CA Advisory Date: 2006-12-13 Discovered By: Ruben Santamarta reversemode.com Impact: Local unprivileged attacker can...
CVE-2006-6496
The 1 VetMONNT.sys and 2 VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service system crash via certain IOCTLs...
CVE-2006-6496
The 1 VetMONNT.sys and 2 VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service system crash via certain IOCTLs...
security flaw
The clipmkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service panic via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed freed pointer dereference...
PT-2006-5740 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue allows remote attackers to cause a denial of service panic via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed,...