Mandriva Linux Security Advisory : libtheora (MDVSA-2010:043)

A vulnerability have been discovered and corrected in libtheora : Integer overflow in libtheora in Xiph.Org Theora before 1.1 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions CVE-2009-3389. The updated...

Integer overflow

Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a video with large dimensions...

[USN-784-1] ImageMagick vulnerability

=========================================================== Ubuntu Security Notice USN-784-1 June 09, 2009 imagemagick vulnerability CVE-2009-1882 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS...

USN-784-1: ImageMagick vulnerability

It was discovered that ImageMagick did not properly verify the dimensions of TIFF files. If a user or automated system were tricked into opening a crafted TIFF file, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program...

CVE-2008-1419

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

DEBIAN-CVE-2008-1419

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

vorbis: zero-dim codebooks can cause crash, infinite loop or heap overflow

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

vorbis: zero-dim codebooks can cause crash, infinite loop or heap overflow

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

NDSA20071016.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nth Dimension Security Advisory NDSA20071016 Date: 16th October 2007 Author: Tim Brown URL: / Product: SiteBar 3.3.8 Vendor: Ondřej Brablc, David Szego and SiteBar Team Risk: High Summary This advisory comes in 4 related parts: 1 SiteBar application h...

NDSA20070412.txt

Nth Dimension Security Advisory NDSA20070412 Date: 12th April 2007 Author: Tim Brown URL: / Product: DSL-G624T router V3.00B01T02.UK-A.20060208 Vendor: D-Link Risk: Medium Summary Following the Securiteam posting "D-Link DSL-G604T Wireless Router Directory Traversal" which described a directory...

CVE-2007-1946

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

CVE-2006-7174

PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this may be the same issue as CVE-2006-5235...

CVE-2006-7174

The CVE-2006-7174 entry describes a PHP remote file inclusion vulnerability in phpBB’s Dimension module, specifically in includes/functions.php, allowing an attacker to execute arbitrary PHP code via a URL supplied to the phpbb_root_path parameter. The issue is categorized as a remote code execut...

CVE-2006-7096

Buffer overflow in the networkhosthandlejoin function in host.c in dimension 3 engine dim3 1.5 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...

PhpBB Module Dimension Remote File Include

=============================================================================== =Bug was found in the part of phpBB = =Dork : "Powered by Dimension" = =Expl : includes/functions.php?phpbbrootpath= = =Source Code : http://www.xs4all.nl/hkicken/plusxl20/phpbb2plusxl20272.zip = =Found by : Rendy &...

PhpBB Module Dimension Remote File Include

=============================================================================== =Bug was found in the part of phpBB = =Dork : "Powered by Dimension" = =Expl : includes/functions.php?phpbbrootpath= = =Source Code : http://www.xs4all.nl/hkicken/plusxl20/phpbb2plusxl20272.zip = =Found by : Rendy &...

CVE-2006-5235

PHP remote file inclusion vulnerability in includes/functionskb.php in Dimension of phpBB 0.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third part...

CVE-2006-5235

The CVE-2006-5235 entry describes a PHP remote file inclusion (RFI) in Dimension of phpBB (0.2.6 and earlier) via the phpbb_root_path parameter, allowing an attacker to execute arbitrary PHP code. Related records (CVE-2006-7174) describe the same issue in the Dimension module’s includes/functions...

CVE-2006-5222

Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/themenportalmitte.php or 2 includes/loggerengine.php...

CVE-2006-5222

CVE-2006-5222 describes multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier. The flaw allows an attacker to craft a URL that sets the phpbb_root_path parameter to include a remote PHP file, triggering code execution on the server via one of two affected scri...