CVE-2008-4217

CVE-2008-4217 corresponds to an Integer signedness error in BOM handling on Apple Mac OS X prior to 10.5.6. The flaw can be triggered by crafted CPIO archive headers, causing a stack-based buffer overflow and enabling remote code execution. Affected product: Mac OS X so far identified as before 1...

CVE-2008-5317

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-5317

LittleCMS (lcms) vulnerability CVE-2008-5317: In cmsAllocGamma() of src/cmsgamma.c, integer signedness error before 1.17 can cause an under-allocated memory allocation when parsing a file with a specific number of entries. This could lead to memory corruption or related failures. Affected version...

CVE-2008-4211

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

CVE-2008-4211

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

CVE-2008-4211

CVE-2008-4211 describes a signedness error in QuickLook on Mac OS X 10.5.5 and in Office Viewer for iPhone OS 1.0–2.1 that allows remote attackers to trigger an out-of-bounds memory access via a crafted Excel file (relating to “handling of columns”), potentially causing denial of service and arbi...

Gentoo Security Advisory GLSA 200606-01 (opera)

The remote host is missing updates announced in advisory GLSA 200606-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-01 (opera)

The remote host is missing updates announced in advisory GLSA 200606-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GnuTLS < 2.2.4 vulnerability (Windows)

The remote host is probably affected by the vulnerabilities described in CVE-2008-1948, CVE-2008-1949, CVE-2008-1950 GnuTLS 2.2.4 vulnerability Impact CVE-2008-1948 The gnutlsservernamerecvparams function in lib/extservername.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly...

FreeBSD Ports: pine, zh-pine, iw-pine

The remote host is missing an update to the system as announced in the referenced advisory. VID 39bd57e6-5d83-11d8-80e3-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: asterisk

The remote host is missing an update to the system as announced in the referenced advisory. VID 8b683bea-d49c-11da-a672-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: pine, zh-pine, iw-pine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-3794

Integer signedness error in the mmsReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a...

CVE-2008-3794

Integer signedness error in the mmsReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a...

CVE-2008-3794: Undefined Security Weakness

Integer signedness error in the mmsReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i allows remote attackers to execute arbitrary code via a crafted mmst link with a negative size value, which bypasses a size check and triggers an integer overflow followed by a...

CVE-2008-2303: Undefined Security Weakness

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability...

Integer overflow

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

CVE-2008-2710

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

CVE-2008-2710

CVE-2008-2710 affects Sun Solaris 10 and OpenSolaris prior to SNV_92. The kernel component involved is ip_set_srcfilter in uts/common/inet/ip/ip_multi.c, where a signedness issue can trigger an out-of-bounds write via an SIOCSIPMSFILTER IOCTL with a large imsf-&gt;imsf_numsrc, enabling local user...

CVE-2008-2710

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...