The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure or cause other adverse effects

The vulnerability of the doaproutch function in the OpenSSL library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures or other effects by sending a long ASN.1 string...

PHP interpreter vulnerabilities that allow attackers to trigger service failures or cause other adverse effects

The multiple vulnerabilities of the phpescapeshellcmd or phpescapeshellarg functions ext/standard/exec.c in the PHP interpreter are caused by a numerical overflow. Exploitation of these vulnerabilities could allow a malicious actor to cause service failures or potentially have other effects by...

DEBIAN-CVE-2014-0196

The nttywrite function in drivers/tty/ntty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service memory corruption and system crash or gain privileges by triggering a race condition...

Suspicious Javascript Containing Overly Long Strings (CVE-2013-2551)

Javascript may contain variables assigned with overly long strings. This behavior may indicate an exploitation attempt...

DEBIAN-CVE-2012-4412

Integer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a heap-based buffer overflow...

CVE-2013-4261

OpenStack Compute Nova Folsom, Grizzly, and earlier, when using Apache Qpid for the RPC backend, does not properly handle errors that occur during messaging, which allows remote attackers to cause a denial of service connection pool consumption, as demonstrated using multiple requests that send...

Wireshark: Malformed LDAP filter string causes Denial of Service via excessive memory consumption

epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service memory consumption via 1 a long LDAP filter string or 2 an LDAP filter string containing many elements...

CVE-2010-1986

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

CVE-2010-1986

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

CVE-2010-1176

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors related to an array of long strings, an array of IMG elements with crafted strings in their SRC attributes, a TBODY element with no...

Ubuntu Update for libthai vulnerability USN-887-1

Ubuntu Update for Linux kernel vulnerabilities USN-887-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8871.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for libthai vulnerability USN-887-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

DEBIAN-CVE-2009-4012

Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to 1 thbrk/thbrk.c and 2 thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information...

USN-887-1: LibThai vulnerability

Tim Starling discovered that LibThai did not correctly handle long strings. A remote attacker could use specially-formed strings to execute arbitrary code with the user's privileges...

PT-2009-4831 · Scmpx · Scmpx

Name of the Vulnerable Software and Affected Versions: SCMPX version 1.5.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, or execute arbitrary code via a long string in a .m3u playlist file. Recommendations: For SCMPX version 1.5.1,...

PT-2009-3742 · Mozilla +1 · Firefox +1

Name of the Vulnerable Software and Affected Versions: Pango versions prior to 1.24 Description: The issue is related to an integer overflow in the pango glyph string set size function, which can be triggered by a long glyph string. This can cause a denial of service, resulting in an application...

Ubuntu Update for pcre3 vulnerability USN-581-1

Ubuntu Update for Linux kernel vulnerabilities USN-581-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5811.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for pcre3 vulnerability USN-581-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

WordNet: Execution of arbitrary code

Background WordNet is a large lexical database of English. Description Jukka Ruohonen initially reported a boundary error within the searchwn function in src/wn.c. A thorough investigation by the oCERT team revealed several other vulnerabilities in WordNet: Jukka Ruohonen and Rob Holland oCERT...

USN-581-1: PCRE vulnerability

It was discovered that PCRE did not correctly handle very long strings containing UTF8 sequences. In certain situations, an attacker could exploit applications linked against PCRE by tricking a user or automated system in processing a malicious regular expression leading to a denial of service or...

FreeBSD : xfce -- multiple vulnerabilities (024edd06-c933-11dc-810c-0016179b2dd5)

Gentoo reports : A remote attacker could entice a user to install a specially crafted 'rc' file to execute arbitrary code via long strings in the 'Name' and 'Comment' fields or via unspecified vectors involving the second vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Buffer overflow

Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to execute arbitrary code via 1 a reply that begins with a long version string, which triggers an overflow in handlertsppkt in rtsphandlers.c; long headers that trigger overflows in 2 sendpauserequest, 3...