Debian Security Advisory DSA 1616-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1616-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[SECURITY] [DSA 1616-2] New clamav packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1616-2 [email protected] http://www.debian.org/security/ Devin Carraway July 26, 2008 http://www.debian.org/security/faq -...

mswork-insecure.txt

BKIS Research 21/04/2008 - Microsoft Work ActiveX Insecure Method Exploit - ====================================================================== Table of Contents Affected Software....................................................1...

CVE-2008-1761

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access...

Invalid memory access in Acronis True Image Group Server 1.5.19.191

Luigi Auriemma Application: Acronis True Image Group Server http://www.acronis.com/enterprise/products/ATIES/group-server.html Versions: = 1.5.19.191 included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages Platforms: Windows Bug: invalid memory access...

Design/Logic Flaw

The Perforce service p4s.exe in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 server-DiffFile or 2 server-ReleaseFile command with a large integer value, which is used in an array initialization calculation, and leads to invali...

CVE-2008-0102

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...

CVE-2008-0102

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...

Buffer overflow

Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."...

Microsoft Publisher Invalid Memory Reference Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

GLSA-200711-20 : Pioneers: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200711-20 Pioneers: Multiple Denials of Service Roland Clobus discovered that the Pioneers server may free sessions objects while they are still in use, resulting in access to invalid memory zones CVE-2007-5933. Bas Wijnen...

Microsoft Windows DCERPC Authentication Denial of Service Vulnerability

This vulnerability allows remote attackers to crash systems with vulnerable installations of the Microsoft Windows operating system. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RPC runtime library rpcrt4.dll during the parsing of RPC-level...

libvorbis: Multiple vulnerabilities

Background libvorbis is the reference implementation of the Xiph.org Ogg Vorbis audio file format. It is used by many applications for playback of Ogg Vorbis files. Description David Thiel of iSEC Partners discovered a heap-based buffer overflow in the 01inverse function in res0.c and a boundary...

Memory corruption

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

Ekiga VoIP/video application DoS

SIPURL::GetHostAddress invalid memory allocation...

CVE-2006-7206

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString...

Design/Logic Flaw

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-1476

The SymTDI device driver SYMTDI.SYS in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service system crash by sending crafted data to...