Fedora Core 3 : openmotif-2.2.3-9.FC3.1 (2005-808)

Mon Apr 4 2005 Thomas Woerner 2.2.3-9.FC3.1 - fixed possible libXpm overflows 151642 - Upstream Fix: Multiscreen mode - Upstream Fix: Crash when restarting by a session manager motifzone1193 - Upstream Fix: Crash when duplicating a window menu containing f.circleup motifzone1202 - fixed divide by...

[SA16463] OpenVPN Multiple DoS Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

GLSA-200507-27 : Ethereal: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-27 Ethereal: Multiple vulnerabilities There are numerous vulnerabilities in versions of Ethereal prior to 0.10.12, including: The SMB dissector could overflow a buffer or exhaust memory CAN-2005-2365. iDEFENSE discovered th...

ethereal -- multiple protocol dissectors vulnerabilities

An Ethreal Security Advisories reports: Our testing program has turned up several more security issues: The LDAP dissector could free static memory and crash. The AgentX dissector could crash. The 802.3 dissector could go into an infinite loop. The PER dissector could abort. The DHCP dissector...

FreeBSD : up-imapproxy -- multiple vulnerabilities (927743d4-5ca9-11d9-a9e7-0001020eed82)

Timo Sirainen reports : There are various bugs in up-imapproxy which can crash it. Since up-imapproxy runs in a single process with each connection handled in a separate thread, any crash kills all the connections and stops listening for new ones. In 64bit systems it might be possible to make it...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

Microsoft Internet Explorer - Multiple Stack Overflows Crashs

Microsoft Internet Explorer - Multiple Stack Overflows Crashs window.onerror=new Function"history.go0"; function btfbtf; btf; milw0rm.com 2005-05-31...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

Multiple vulnerabilities in Yager 5.24

Luigi Auriemma Application: Yager http://www.yager-game.de Versions: = 5.24 Platforms: Windows Bugs: A nickname buffer-overflow B data block buffer-overflow C freeze caused by incomplete data block D various crashes caused by corrupted data Exploitation: remote, versus server and clients Date: 14...

HP-UX PHSS_29546 : HPSBUX0310-285 SSRT3642 Potential Security Vulnerabilities Apache web server HP-UX VVOS and Webproxy.

s700800 11.04 Virtualvault 4.6 OWS update : 1. Potential Apache web server crash when it goes into an infinite loop due to too many subsequent internal redirects and nested subrequests. VU379828 2. No de-allocation of file descriptors while servicing CGI scripts through child processes...

RHEL 2.1 / 3 : ethereal (RHSA-2005:011)

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. A number of security flaws have been discovered in Ethereal. On a system where Ethereal is running, a remote attacker could send malicious packets to trigge...

DSA-651-1 squid - buffer overflow, integer overflow

Bulletin has no description...

Microsoft Windows Kernel - '.ANI' File Parsing Crash

111111111111111111111111111111 // milw0rm.com 2004-12-25...

[slackware-security] libtiff

New libtiff packages are available for Slackware 8.1, 9.0, 9.1, 10.1, and -current to fix security issues that could lead to application crashes, or possibly execution of arbitrary code. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

USN-8-1: gaim vulnerabilities

A buffer overflow and two remote crashes were recently discovered in gaim's MSN protocol handler. An attacker could potentially execute arbitrary code with the user's privileges by crafting and sending a particular MSN message...

DSA-567-1 tiff - heap overflows

Bulletin has no description...

Debian DSA-294-1 : gkrellm-newsticker - missing quoting, incomplete parser

Brian Campbell discovered two security-related problems in gkrellm-newsticker, a plugin for the gkrellm system monitor program, which provides a news ticker from RDF feeds. The Common Vulnerabilities and Exposures project identifies the following problems : CAN-2003-0205 It can launch a web brows...

GLSA-200404-03 : Tcpdump Vulnerabilities in ISAKMP Parsing

The remote host is affected by the vulnerability described in GLSA-200404-03 Tcpdump Vulnerabilities in ISAKMP Parsing There are two specific vulnerabilities in tcpdump, outlined in reference 1 . In the first scenario, an attacker may send a specially crafted ISAKMP Delete packet which causes...

Mozilla Firefox < 2.0.0.15 Multiple Vulnerabilities

Binary data 4567.prm...

qt -- image loader vulnerabilities

Qt contains several vulnerabilities related to image loading, including possible crashes when loading corrupt GIF, BMP, or JPEG images. Most seriously, Chris Evans reports that the BMP crash is actually due to a heap buffer overflow. It is believed that an attacker may be able to construct a BMP...