Fedora 8 : libvorbis-1.2.0-2.fc8 (2008-3934)

Will Drewry of the Google Security Team reported several flaws in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...

Microsoft Security Bulletin MS08-024 - Critical Cumulative Security Update for Internet Explorer (947864)

Microsoft Security Bulletin MS08-024 - Critical Cumulative Security Update for Internet Explorer 947864 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves one privately reported vulnerability. The vulnerability could allow remote code executi...

Moderate: Red Hat Security Advisory: java-1.4.2-bea security update

Updated java-1.4.2-bea packages that correct several security issues and add enhancements are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having moderate security impact by the...

X-pad guestbook there is a great security-vulnerability warning-the black bar safety net

This program can search http://www. baidu. com/baidu? wd=x-pad&cl=3x-pad the keywords.。 On this guestbook, I found a modified version of the drawing: "Based on the text of the php guestbook,easy to install,powerful,good safety,the appearance of custom is strong,is a very useful guest book,...

Safari 3.0.3 (522.15.5) Buffer overflow

Azizov E. azizov at itdefence dot ru email concealed 1. At processing of data, which has more than 65474 bytes in size, occurs buffer overflow. POC: html body script var maxbuf = 65474; buff = "A"; for i=0;imaxbuf;i++ buff = buff+"A"; document.location.hash = buff+"BOW! ";...

MiMMS媒体流处理远程栈溢出漏洞

MiMMS是一款使用MMS协议下载并保存流媒体的程序。 MiMMS在处理畸形的数据时，远程攻击者可能利用此漏洞在用用户机器上执行任意指令。 MiMMS的getheader和getmediapacket函数在从服务器读取数据时存在栈溢出漏洞。如果用户受骗连接到了恶意的服务器的话，就会触发这个漏洞，导致执行任意代码。 xine xine-lib 1.1.0 xine xine-lib 1.0.1 xine xine-lib 1.0 MiMMS MiMMS 0.0.9 厂商补丁： Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200607-07）以及相应补丁:...

Links_ ELinks smbclient - Remote Command Execution

Links ELinks smbclient - Remote Command Execution source: https://www.securityfocus.com/bid/21082/info Links and ELinks are prone to a remote command-execution vulnerability because the applications fail to properly process website data containing 'smb' commands. An attacker can exploit this issu...

PlanetFileServer mshftp.dll Data Processing Remote Overflow

The remote host appears to be running PlanetFileServer, an FTP server for Windows from PlanetDNS. The installed version of PlanetFileServer is vulnerable to a buffer overflow when processing large commands. An unauthenticated attacker can trigger this flaw to crash the service or execute arbitrar...

RealPlayer Skin File Handling Buffer Overflow

Binary data 2381.prm...

Heimdal ftpd/tnftpd/lukemftpd signal handling race conditions

Problem with OOB data processing...

Mantis Cross-Site Request Forgery Vulnerabilities

Binary data 4506.prm...

Sambar Server 6.0 - results.stm POST Buffer Overflow

Sambar Server 6.0 - results.stm POST Buffer Overflow source: https://www.securityfocus.com/bid/9607/info A buffer overflow vulnerability has been reported in the Sambar web server. The issue is due to a boundary condition error in the POST data processing of the affected software. Immediate...

Sambar Server 6.0 - 'results.stm' POST Buffer Overflow

source: https://www.securityfocus.com/bid/9607/info A buffer overflow vulnerability has been reported in the Sambar web server. The issue is due to a boundary condition error in the POST data processing of the affected software. Immediate consequences of an attack may result in a denial of servic...

Microsoft Internet Explorer 5 (Windows 95/98/2000/NT 4.0) - XML HTTP Redirect

MS IE 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 XML HTTP Redirect Vulnerability source: https://www.securityfocus.com/bid/815/info A vulnerability in the method IE5 uses to process XML data may allow a malicious web site owner to read files on a visiting user's computer. A web page...