UBUNTU-CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...

Songbird Media Player <= 0.2 Format String Denial Of Service PoC

No description provided by source. / ======================================================================== 0-day Songbird Media Player = 0.2 Format String Denial Of Service PoC ======================================================================== Songbird Media Player and lower experiance a...

CVE-2006-6250

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service crash via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked...

CVE-2006-6250

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service crash via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked...

CVE-2006-6250

Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of service crash via an M3U Playlist file containing extended ASCII, which causes the Unicode converter to be invoked...

Songbird Media Player 0.2 - Format String Denial of Service (PoC)

/ ======================================================================== 0-day Songbird Media Player November 2006 - Month Of Greg's Media Player Exploits : i'll probably continue it into December Discovered and...

CVE-2006-5608

SQL injection vulnerability in Extended Tracker xtracker 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs."...

CVE-2006-5608

SQL injection vulnerability in Extended Tracker xtracker 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs."...

CVE-2006-5608

CVE-2006-5608: SQL injection in Extended Tracker (xtracker) 4.7 for Drupal, before 1.5.2.1, allows remote attackers to execute arbitrary SQL commands via parameters from URLs. Affected component: xtracker for Drupal; root cause: improper handling of URL parameters leading to SQL injection. Exploi...

CVE-2006-5608: Undefined Security Weakness

SQL injection vulnerability in Extended Tracker xtracker 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs."...

Extended Tracker - SQL Injection

The contributed module Extended Tracker xtracker accepts parameters from URLs and uses those unescaped in SQL queries, allowing malicious users to execute SQL injection attacks. This may result in them gaining administrator privileges. Versions affected Please check the CVS $Id$ fields in the fil...

CVE-2006-4438

Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name...

CVE-2006-4626: Undefined Security Weakness

Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow...

security flaw

Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...

CVE-2006-2193

Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...

CVE-2006-2193

Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...

CVE-2006-2193

Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character i...

PostgreSQL / MySQL extended character sets SQL injections

It's possible to use character different from quote sign in different encodings...

GLSA-200605-05 : rsync: Potential integer overflow

The remote host is affected by the vulnerability described in GLSA-200605-05 rsync: Potential integer overflow An integer overflow was found in the receivexattr function from the extended attributes patch xattr.c for rsync. The vulnerable function is only present when the 'acl' USE flag is set...

rsync: Potential integer overflow

Background rsync is a server and client utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree. Description An integer overflow was found in the receivexattr function from the extended...