3851 matches found
CVE-2000-1219
The CVE-2000-1219 entry documents a flaw in the -ftrapv option of gcc/g++ 3.3.3 and earlier that fails to handle all integer overflow types, potentially leaving applications vulnerable to overflow-related issues. Connected records confirm the affected component and root cause (incomplete handling...
CVE-2000-1219
The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows...
CVE-2004-2644
Unspecified vulnerability in ASN.1 Compiler asn1c before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags...
CVE-2004-2645
Unspecified vulnerability in ASN.1 Compiler asn1c before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length structures."...
ASN.1 compiler multiple bugs
No description provided...
[SA12794] The ASN.1 Compiler Unspecified Security Issues
TITLE: The ASN.1 Compiler Unspecified Security Issues SECUNIA ADVISORY ID: SA12794 VERIFY ADVISORY: http://secunia.com/advisories/12794/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: The ASN.1 Compiler 0.x http://secunia.com/product/4038/ DESCRIPTION: Two security...
Debian DSA-115-1 : php - broken boundary check and more
Stefan Esser, who is also a member of the PHP team, found several flawsin the way PHP handles multipart/form-data POST requests as described in RFC1867 known as POST fileuploads. Each of the flaws could allow an attacker to execute arbitrary code on the victim's system. For PHP3 flaws contain a...
Fedora Core 2 : net-tools-1.60-25.1 (2004-154)
Thu Jun 03 2004 Phil Knirsch 1.60-25.1 - Built FC2 security errata version based on rawhide. - Fri May 14 2004 Phil Knirsch 1.60-27 - Fixed compiler warning/error in netplug. - Updated to netplug-1.2.6 for security update and fixes. - Thu May 06 2004 Phil Knirsch 1.60-26 - Updated netplugd to...
CVE-2003-0485
Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type...
CVE-2003-0485
Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type...
CVE-2003-0485
CVE-2003-0485 describes a buffer overflow in Progress 4GL Compiler 9.1D06 and earlier. The vulnerability occurs when compiling source code containing a long, invalid data type, potentially allowing an attacker to execute arbitrary code. According to the provided documents, the exploit details are...
SRT2003-06-20-1232 - Progress 4GL Compiler datatype overflow
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems...
CVE-2002-1940
LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application...
CVE-2002-2281
Symantec Java! JIT Just-In-Time Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler...
Symantec Java! JustInTime Compiler 210.65 - Command Execution
Symantec Java! JustInTime Compiler 210.65 - Command Execution source: https://www.securityfocus.com/bid/6222/info A vulnerability has been discovered in the Java! JustInTime compiled used by Netscape Communicator, related to the generation of Intel instructions from specially constructed Java...
Symantec Java! JustInTime Compiler 210.65 - Command Execution
source: https://www.securityfocus.com/bid/6222/info A vulnerability has been discovered in the Java! JustInTime compiled used by Netscape Communicator, related to the generation of Intel instructions from specially constructed Java bytecode. If a malicous applet is compiled by the vulnerable...
Multiple compilers "erased" memory reading
Multiple secure programs use something like memsetbuf, 0, len to erase keys, passwords, etc from memory. The problem is this code can be eliminated by compiler during optimization process...
RUS-CERT Advisory 2002-08:02: Flaw in calloc and similar routines
Flaw in calloc and similar routines Integer overflow can occur during the computation of the memory region size by calloc and similar functions. As a result, the function returns a buffer which is too small, possibly resulting in a subsequent buffer overflow. Who Should Read This Document This...