CVE-2009-4880

Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted format string, as demonstrated by a crafted first argument to th...

Ubuntu: Security Advisory (USN-944-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for glibc, eglibc vulnerabilities USN-944-1

Ubuntu Update for Linux kernel vulnerabilities USN-944-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9441.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for glibc, eglibc vulnerabilities USN-944-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2010-1634

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service application crash via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a...

CVE-2010-1634

CVE-2010-1634 concerns the audioop module of Python (versions 2.6, 2.7, 3.1, 3.2) where multiple integer overflows in audioop.c can be triggered by a large fragment in a call like audioop.lin2lin, leading to a denial of service (application crash). The vulnerability is tied to an incorrect prior ...

CVE-2010-1634

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service application crash via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a...

[USN-944-1] GNU C Library vulnerabilities

=========================================================== Ubuntu Security Notice USN-944-1 May 25, 2010 glibc, eglibc vulnerabilities CVE-2008-1391, CVE-2010-0296, CVE-2010-0830 =========================================================== A security issue affects the following Ubuntu releases:...

CVE-2010-1513

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via 1 a large JPG image, related to the jpg2bitmap function or 2 a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows...

CVE-2010-1513

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via 1 a large JPG image, related to the jpg2bitmap function or 2 a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows...

CVE-2010-1513

Ziproxy contains a vulnerability in src/image.c up to version 3.0.1 where integer overflows on processing unusually large JPG/PNG images lead to heap-based buffer overflows and remote arbitrary code execution. The issue affects Ziproxy before 3.0.1; remediation is to upgrade to 3.0.1 or newer (pe...

CVE-2010-1513

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via 1 a large JPG image, related to the jpg2bitmap function or 2 a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows...

CVE-2010-1513

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via 1 a large JPG image, related to the jpg2bitmap function or 2 a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows...

USN-944-1: GNU C Library vulnerabilities

Maksymilian Arciemowicz discovered that the GNU C library did not correctly handle integer overflows in the strfmon function. If a user or automated system were tricked into processing a specially crafted format string, a remote attacker could crash applications, leading to a denial of service...

CVE-2009-4880

Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted format string, as demonstrated by a crafted first argument to th...

CVE-2010-0129

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...

CVE-2010-0129

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...

CVE-2010-0129

Adobe Shockwave Player is affected by CVE-2010-0129 due to multiple integer overflows leading to memory corruption via specially crafted Director (.dir) files. The vulnerability affects Shockwave Player prior to 11.5.7.609 and can enable remote memory corruption or potential arbitrary code execut...

VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129)

VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities CVE-2010-0129 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to so...

PHP multiple security vulnerabilities

Multiple information lekages, uninitialized memory access, double free, integer overflows...

CVE-2010-1440

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a special command in a DVI file, related to the 1 predospecial and 2 bbdospecial function...