kernel: prevent heap corruption in snd_ctl_new()

Multiple integer overflows in the sndctlnew function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted 1 SNDRVCTLIOCTLELEMADD or 2...

CVE-2010-4202

Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font...

CVE-2010-4202

Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font...

CVE-2010-4202

CVE-2010-4202 affects Google Chrome on Linux, caused by multiple integer overflows in font handling that could allow remote denial of service and potentially other impact. Public description states impact as DoS or unspecified other impact via crafted font. Affected software/version is Google Chr...

CVE-2010-4202

Removed by vendor...

Google Chrome < 7.0.517.44 Multiple Vulnerabilities

Binary data 800908.prm...

Google Chrome < 7.0.517.44 Multiple Vulnerabilities

Binary data 5698.pasl...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 7052)

This update of libtiff fixes several integer overflows that could lead to a corrupted heap memory. This bug can be exploited remotely with a crafted TIFF file to cause an application crash or probably to execute arbitrary code. CVE-2010-1411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

SuSE 10 Security Update : gzip (ZYPP Patch Number 6793)

The following bug has been fixed : Specially crafted gzip archives could trigger integer overflows. Attackers could exploit that to crash gzip or potentially execute arbitrary code CVE-2010-0001. Only 64bit architectures are affected by this flaw. %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : libapr1 (ZYPP Patch Number 6545)

This update of libapr-util1 and libapr1 fixes multiple integer overflows that could probably be used to execute arbitrary code remotely. CVE-2009-2412 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2010-3442

Multiple integer overflows in the sndctlnew function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted 1 SNDRVCTLIOCTLELEMADD or 2...

CVE-2010-3442

Multiple integer overflows in the sndctlnew function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted 1 SNDRVCTLIOCTLELEMADD or 2...

CVE-2010-3442

Multiple integer overflows in the sndctlnew function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted 1 SNDRVCTLIOCTLELEMADD or 2...

openSUSE Security Update : libgdiplus0 (openSUSE-SU-2010:0665-1)

This update fixes three integer overflows found by Secunia Research member Stefan Cornelius that could possibly be exploited to execute arbitrary code : - 'gdiploadtiffimage' by processing specially crafted TIFF images - 'gdiploadjpegimageinternal' by processing specially crafted JPEG images -...

openSUSE Security Update : libgdiplus0 (openSUSE-SU-2010:0665-1)

This update fixes three integer overflows found by Secunia Research member Stefan Cornelius that could possibly be exploited to execute arbitrary code : - 'gdiploadtiffimage' by processing specially crafted TIFF images - 'gdiploadjpegimageinternal' by processing specially crafted JPEG images -...

Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities

Multiple memory corruptions, integer overflows, buffer overflows, code execution, crossite scripting...

libgdiplus / Mono multiple integer overflows

Multiple integer overflows on BPM, JPEG, TIFF parsing...

OpenOffice integer overflows

Integer overflows in Impress...

CVE-2010-3000

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...

CVE-2010-3000

Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...