CVE-2005-2450

Multiple integer overflows in the 1 TNEF, 2 CHM, or 3 FSG file format processors in libclamav for Clam AntiVirus ClamAV 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message...

zlib: Buffer overflow

Background zlib is a widely used free and patent unencumbered data compression library. Description Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a buffer overflow in zlib. A bounds checking operation failed to take invalid data into account, allowing a specifically malformed...

linux-realplayer -- RealText parsing heap overflow

An iDEFENSE Security Advisory reports: Remote exploitation of a heap-based buffer overflow vulnerability in the RealText file format parser within various versions of RealNetworks Inc.'s RealPlayer could allow attackers to execute arbitrary code...

linux/x86 upload & exec 189 bytes

linux/x86 upload & exec 189 bytes. Shellcode exploit for linx86 platform UPLOAD & EXEC SHELLCODE 1 converting asm to hex 2 asm code 3 hex output 4 upload function This is an 'upload and exec' shellcode for the x86 platform. File has to be in executable format, cool if you know the distribution of...

GLSA-200506-09 : gedit: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-09 gedit: Format string vulnerability A format string vulnerability exists when opening files with names containing format specifiers. Impact : A specially crafted file with format specifiers in the filename can cause...

Important: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that fix a flaw in kimgio input validation are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. KDE is a graphical desktop environment for the X Window System. Konqueror is...

[SECURITY] [DSA 714-1] New kdelibs packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 714-1 [email protected] http://www.debian.org/security/ Martin Schulze April 26th, 2005 http://www.debian.org/security/faq -...

kdelibs -- kimgio input validation errors

A KDE Security Advisory reports: kimgio contains a PCX image file format reader that does not properly perform input validation. A source code audit performed by the KDE security team discovered several vulnerabilities in the PCX and other image file format readers, some of them exploitable to...

security flaw

Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service crash or memory corruption via TIFF images that lead to incorrect malloc calls...

security flaw

Integer overflow in the TIFFFetchStripThing function in tifdirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overfl...

security flaw

ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...

security flaw

The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service crash via a crafted TIFF file...

[VulnWatch] RealOne Player / Real .WAV Heap Overflow File Format Vulnerability

Mark Litchfield of NGSSoftware has discovered a high risk Heap Overflow vulnerability in the .WAV file format when being opened by either of the following products: Windows: RealPlayer 10.5 6.0.12.1056 and below RealPlayer 10 RealOne Player V2 RealOne Player V1 RealPlayer 8 RealPlayer Enterprise...

security flaw

Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...

O3Read 0.0.3 - HTML Parser Buffer Overflow

source: https://www.securityfocus.com/bid/12000/info o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is possible that files may originate from an...

Winamp 5.06 - IN_CDDA.dll Remote Buffer Overflow

Winamp 5.06 - INCDDA.dll Remote Buffer Overflow / Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are ".cda" - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C...

Winamp <= 5.06 IN_CDDA.dll Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= Winamp //File ops. //m3u File format //http://hanna.pyxidis.org/tech/m3u.html // Host info: // Name=ntdll system // File version=5.1.2600.1217 xpsp2.030429-213 //...

SUSE-SA:2003:017: file

The remote host is missing the patch for the advisory SUSE-SA:2003:017 file. The file command can be used to determine the type of files. iDEFENSE published a security report about a buffer overflow in the handling-routines for the ELF file-format. In conjunction with other mechanisms like...

Arbitrary file overwriting in Unreal engine through UMOD

Luigi Auriemma Application: Unreal engine http://unreal.epicgames.com Versions: any game based on this engine that supports the UMOD installation. An example are Unreal Tournament = 451b and Unreal Tournament 2003 = 2225. A full list of vulnerable games is not available. Platforms: Windows and...

[VulnWatch] REAL One Player R3T File Format Stack Overflow

NGSSoftware Insight Security Research Advisory Name: REAL One Player R3T File Format Stack Overflow Systems Affected: RealPlayer 8, RealOne Player, RealOne Player v2 for Windows only all languages, RealPlayer 10 Beta English only and ReaPlayer Enterprise all versions, standalone and as configured...