7779 matches found
BitDefender AV Packed PE File Parsing Engine Heap Overflow
n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.003 15-Dec-2006 Vendor: BitDefender, http://www.bitdefender.com Affected Products: BitDefender Antivirus, BitDefender Antivirus Plus, BitDefender Internet Security, BitDefender Mail Protection for Enterprises, BitDefender Online...
CVE-2006-6302
fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containi...
AVG Anti-Virus多个远程代码执行漏洞
AVG Anti-Virus是一款功能完备的杀毒软件。 AVG Anti-Virus的文件解析引擎存在多个漏洞，目前已确定的漏洞包括： - 解析.CAB文件时的整数溢出可能导致堆溢出； - 解析.CAB文件时未初始化变量； - 解析.DOC文件时会分隔为0； - 解析.RAR文件时的整数溢出可能导致堆溢出； - 解析.EXE文件时存在整数问题。 如果攻击者创建了特制文件的话，这些漏洞就可能导致远程执行任意代码。 Grisoft AVG Anti-Virus 7.1.407 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2006-4182
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service scanning service crash and execute arbitrary code via a crafted Portable Executable PE file that leads to a heap-based buffer overflow when less memory is allocated...
CVE-2006-4262
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via multiple vectors including 1 a long pathname that is not properly handled during file list parsing, 2 long pathnames that result from path...
CVE-2006-4262
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via multiple vectors including 1 a long pathname that is not properly handled during file list parsing, 2 long pathnames that result from path...
Apple iTunes AAC File Parsing Integer Overflow (uncredentialed check)
The version of Apple iTunes running on the remote host is affected by an integer overflow vulnerability when it parses specially crafted AAC files. By convincing a user to open such a file, a remote attacker can execute arbitrary code with the same level of privileges as the user. C Tenable Netwo...
Integer overflow
Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...
CVE-2006-1467
Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...
CVE-2006-1467
Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...
NetPBM pamtofits buffer overflow
Off-by-one buffer overflow on input file parsing...
ClamAV antivirus multiple vulnerabilities
Buffer overflow on handling FSG and UPX packed files, endless loops on CAB and TNEF files parsing...
libavcodec / xine library buffer overflow
Heap buffer overflow on PNG file parsing...
Sylpheed mail agent buffer overflow
Buffer overflow on LDIF file parsing...
NetPBM graphical utilities buffer overflow
Buffer overflow on PNM file parsing in pnmtopng utility...
CVE-2002-1743
AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service crash via a malformed .hpf file...
AOL Instant Messenged integer overflow
Integer overflow on signed type during buffy icon GIF file parsing...
[SECURITY] [DSA 709-1] New libexif packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 709-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...