Code injection

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a 1 CD-ROM device or 2 U3-enabled USB device containing a filesystem with an...

CVE-2008-0951

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a 1 CD-ROM device or 2 U3-enabled USB device containing a filesystem with an...

CVE-2008-0951

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a 1 CD-ROM device or 2 U3-enabled USB device containing a filesystem with an...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libcdio vulnerability (USN-580-1)

Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code. Note that Tenable Network Securi...

USN-580-1: libcdio vulnerability

Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code...

libcdio: User-assisted execution of arbitrary code

Background libcdio is a library for accessing CD-ROM and CD images. Description Devon Miller reported a boundary error in the "printiso9660recurse" function in files cd-info.c and iso-info.c when processing long filenames within Joliet images. Impact A remote attacker could entice a user to open ...

Debian Security Advisory DSA 366-1 (eroaster)

The remote host is missing an update to eroaster announced via advisory DSA 366-1. OpenVAS Vulnerability Test $Id: deb3661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 366-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-366)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1162)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GNU libcdio库cd-info/iso-info文件栈溢出漏洞

BUGTRAQ ID: 27131 CVECAN ID: CVE-2007-6613 GNU压缩磁盘输入和控制库（libcdio）是用于访问CD-ROM和CD镜像的函数库。 libcdio库的cd-info.c和iso-info.c文件中的printiso9660recurse函数中存在栈溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 如果用户受骗使用该库加载了包含有超长joilet文件名的磁盘或镜像的话，就可能导致拒绝服务（core dump）或执行任意指令。以下是src/iso-info.c的printiso9660recurse函数中的漏洞代码： CDIOLISTFOREACH...

[SECURITY] Fedora 8 Update: libcdio-0.78.2-4.fc8

This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM devices...

[SECURITY] Fedora 7 Update: libcdio-0.78.2-4.fc7

This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM devices...

[SECURITY] Fedora 8 Update: autofs-5.0.2-20

autofs is a daemon which automatically mounts filesystems when you use them, and unmounts them later when you are not using them. This can include network filesystems, CD-ROMs, floppies, and so forth...

CVE-2003-1407: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command...

CVE-2002-2232: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD CWD command...

CVE-2003-1349: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in NITE ftp-server NiteServer 1.83 allows remote attackers to list arbitrary directories via a ".." backslash dot dot in the CD CWD command...

CVE-2007-5241: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service machine crash via the "MCR MCL SHOW CSMA-CD Port All" command, which overwrites a Non-Paged Pool Packet...

Unfixed XSS vulnerability at www13.cd-wow.com

Security researcher RoMeO, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www13.cd-wow.com, which at the time of submission ranked 28971 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is currently...

The history of the most simple Windows System Password rescue-vulnerability warning-the black bar safety net

Forgot Windows login password? On the Internet about solution are numerous, but after trying you will find that many methods are simply not effective, and some may even cause the system to collapse completely. By the author in Windows 2 0 0 0 and Windows XP in the repeated research and testing,...

DEBIAN-CVE-2007-3316

Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...