libextractor 0.5.13 - Multiple Heap Overflows (PoC)

libextractor = 0.5.13 Multiple Heap Overflow PoC Exploits https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1801.zip 05172006-libextho.zip milw0rm.com 2006-05-17...

GLSA-200603-02 : teTeX, pTeX, CSTeX: Multiple overflows in included XPdf code

The remote host is affected by the vulnerability described in GLSA-200603-02 teTeX, pTeX, CSTeX: Multiple overflows in included XPdf code CSTeX, teTex, and pTeX include XPdf code to handle PDF files. This XPdf code is vulnerable to several heap overflows GLSA 200512-08 as well as several buffer a...

GLSA-200601-17 : Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows

The remote host is affected by the vulnerability described in GLSA-200601-17 Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows Chris Evans has reported some integer overflows in Xpdf when attempting to calculate buffer sizes for memory allocation, leading to a heap overflow and a...

[ GLSA 200601-17 ] Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows

Gentoo Linux Security Advisory GLSA 200601-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Symantec RAR decompression library contains multiple heap overflows

Overview The Symantec RAR decompression library Dec2RAR.dll contains multiple heap buffer overflows. Using a specially crafted RAR archive, a remote attacker could execute arbitrary code or cause a denial of service. Description Symantec AntiVirus and other security products use a library to...

security flaw

Multiple heap-based buffer overflows in the 1 DCTStream::readProgressiveSOF and 2 DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, as used in products such as a Poppler, b teTeX, c KDE kpdf, d pdftohtml, e KOffice KWord, f CUPS, and g...

FreeBSD : zgv -- exploitable heap overflows (249a8c42-6973-11d9-ae49-000c41e2cdad)

infamous41md reports : zgv uses malloc frequently to allocate memory for storing image data. When calculating how much to allocate, user-supplied data from image headers is multiplied and/or added without any checks for arithmetic overflows. We can overflow numerous calculations, and cause small...

Mandrake Linux Security Advisory : mplayer (MDKSA-2005:115)

Two heap overflows were discovered in mplayer's code handling the RealMedia RTSP and Microsoft Media Services streams over TCP MMST. These vulnerabilities could allow for a malicious server to execute arbitrary code on the client computer with the permissions of the user running MPlayer. The...

pico33.txt

Multiple vulnerabilities in Pico Server pServ v3.3 discovered by Raphaël Rigo Product: Pico Server pServ Affected Version: 3.3 verified, =3.3 probably too Not affected Version: 3.4 OS affected: all Risk: critical Remote Exploit: yes URL: http://pserv.sourceforge.net/ Overview ======== Pico Server...

[NEWS] GNU oSIP URI Parsing Heap Overflows

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Mandrake Linux Security Advisory : mplayer (MDKSA-2004:157)

A number of vulnerabilities were discovered in the MPlayer program by iDEFENSE, Ariel Berkman, and the MPlayer development team. These vulnerabilities include potential heap overflows in Real RTSP and pnm streaming code, stack overflows in MMST streaming code, and multiple buffer overflows in the...

zgv image viewing heap overflows

++++++++++++++++++++++++++++++++++++++++++++ Subject: zgv multiple heap overflows ++++++++++++++++++++++++++++++++++++++++++++ Product: zgv is a picture viewer with a thumbnail-based file selector, for the Linux and FreeBSD console it uses svgalib. It's pretty featureful, and is probably the best...

[SECURITY] [DSA 567-1] New libtiff packages fix remote code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 567-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 567-1] New libtiff packages fix remote code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 567-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2004 http://www.debian.org/security/faq -...

GLSA-200409-26 : Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200409-26 Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities Mozilla-based products are vulnerable to multiple security issues. Firstly, routines handling the display of BMP images and VCards contain an...

security flaw

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file...

Critical: Red Hat Security Advisory: : Updated Sendmail packages fix vulnerability.

Updated Sendmail packages that fix a potentially-exploitable vulnerability are now available. Sendmail is a widely used Mail Transport Agent MTA and is included in all Red Hat Linux distributions. Michal Zalewski found a bug in the prescan function of unpatched Sendmail versions prior to 8.12.10...

Multiple Heap Overflows in FTP Desktop

Multiple Heap Overflows in FTP Desktop Introduction: ============= "FTP Desktop lets you access FTP sites as if they were folders on your computer. Now you can move your files between your hard disk and remote FTP sites with greater ease." - Vendors Description http://www.ftpdesktop.com Note: FTP...