5071 matches found
Microsoft Windows Kernel - '.ANI' File Parsing Crash
111111111111111111111111111111 // milw0rm.com 2004-12-25...
[slackware-security] libtiff
New libtiff packages are available for Slackware 8.1, 9.0, 9.1, 10.1, and -current to fix security issues that could lead to application crashes, or possibly execution of arbitrary code. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...
USN-8-1: gaim vulnerabilities
A buffer overflow and two remote crashes were recently discovered in gaim's MSN protocol handler. An attacker could potentially execute arbitrary code with the user's privileges by crafting and sending a particular MSN message...
DSA-567-1 tiff - heap overflows
Bulletin has no description...
Debian DSA-294-1 : gkrellm-newsticker - missing quoting, incomplete parser
Brian Campbell discovered two security-related problems in gkrellm-newsticker, a plugin for the gkrellm system monitor program, which provides a news ticker from RDF feeds. The Common Vulnerabilities and Exposures project identifies the following problems : CAN-2003-0205 It can launch a web brows...
GLSA-200404-03 : Tcpdump Vulnerabilities in ISAKMP Parsing
The remote host is affected by the vulnerability described in GLSA-200404-03 Tcpdump Vulnerabilities in ISAKMP Parsing There are two specific vulnerabilities in tcpdump, outlined in reference 1 . In the first scenario, an attacker may send a specially crafted ISAKMP Delete packet which causes...
Mozilla Firefox < 2.0.0.15 Multiple Vulnerabilities
Binary data 4567.prm...
qt -- image loader vulnerabilities
Qt contains several vulnerabilities related to image loading, including possible crashes when loading corrupt GIF, BMP, or JPEG images. Most seriously, Chris Evans reports that the BMP crash is actually due to a heap buffer overflow. It is believed that an attacker may be able to construct a BMP...
libpng
New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix security issues. These issues could cause program crashes, or possibly allow arbitrary code embedded in a malicious PNG image to execute. The PNG library is widely used within the system, so all sites should...
US-CERT Technical Cyber Security Alert TA04-217A -- Multiple Vulnerabilities in libpng
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerabilities in libpng Original release date: August 4, 2004 Last revised: -- Source: US-CERT Systems Affected Applications and systems that use the libpng library. Overview Several vulnerabilities exist in the libpng library, the most...
RHEL 2.1 : glibc (RHSA-2004:383)
Updated glibc packages that fix a security flaw in the resolver as well as dlclose handling are now available. The GNU libc packages known as glibc contain the standard C libraries used by applications. A security audit of the glibc packages in Red Hat Enterprise Linux 2.1 found a flaw in the...
Fedora Core 1 : ethereal-0.10.5-0.1.1 (2004-219)
Issues have been discovered in the following protocol dissectors : - The iSNS dissector could make Ethereal abort in some cases. 0.10.3 - 0.10.4 CVE-2004-0633 - SMB SID snooping could crash if there was no policy name for a handle. 0.9.15 - 0.10.4 CVE-2004-0634 - The SNMP dissector could crash du...
Microsoft Internet Explorer - Overly Trusted Location Cache
Microsoft Internet Explorer - Overly Trusted Location Cache Overly Trusted Location Variant Method Cache Vulnerability GO! This vulnerability seems to be unstable. For some reason, it crashes my internet explorer unless the exploit is executed onlo +ad and even then it crashes sometimes. var...
Microsoft Internet Explorer - Overly Trusted Location Cache
Overly Trusted Location Variant Method Cache Vulnerability GO! This vulnerability seems to be unstable. For some reason, it crashes my internet explorer unless the exploit is executed onlo +ad and even then it crashes sometimes. var...
RHEL 2.1 : xinetd (RHSA-2003:161)
Updated xinetd packages fix a security vulnerability and other bugs. Xinetd is a master server that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for any reason. ...
IBM WebSphere Edge DoS
Server crashes on incomlete HTTP request...
Sun Java Runtime Environment 1.4.x - Font Object Assertion Failure Denial of Service
source: https://www.securityfocus.com/bid/10623/info The Sun Java Runtime Environment Font object is reportedly vulnerable to an assertion failure denial of service vulnerability. This issue is due to a failure of the process to handle exceptional conditions when processing font objects. This iss...
Various crashs and fun in Race Driver 1.20
Luigi Auriemma Application: http://www.codemasters.com/tocaracedriver/ Versions: = 1.20 Platforms: Windows Bugs: various crashs and spoofed messages Risk: medium Exploitation: remote, versus server and attached clients Date: 08 June 2004 Author: Luigi Auriemma e-mail: [email protected] web:...
ToCA Race Driver - Multiple Remote Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/10492/info ToCA Race Driver is reportedly affected by multiple remote denial of service vulnerabilities. These issues are due to a failure of the application to handle exceptional network traffic. These issues may allow an attacker to cause the affected...