PT-2013-1567

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux RHEL version 5 Description The issue is related to an unspecified vulnerability in autofs, which can be exploited by local users to cause a denial of service, resulting in an autofs crash and delayed mounts. This can...

DEBIAN-CVE-2012-3498

PHYSDEVOPmappirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service host crash and possibly read hypervisor or guest memory via vectors related to a missing range check of map-index...

Integer overflow

Multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large 1 width or 2 height value in a Portable Pixel Map ppm image, which triggers a...

DEBIAN-CVE-2012-4433

Multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large 1 width or 2 height value in a Portable Pixel Map ppm image, which triggers a...

UBUNTU-CVE-2012-4433

Multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large 1 width or 2 height value in a Portable Pixel Map ppm image, which triggers a...

PT-2012-1093

Name of the Vulnerable Software and Affected Versions GEGL versions 0.1.2 through 0.2.0 GEGL version 0.1.2 Description The issue affects the GEGL library, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via a large width or height value in a Portable Pixe...

[SECURITY] Fedora 16 Update: mapserver-6.0.3-4.fc16

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

PT-2012-4763

Name of the Vulnerable Software and Affected Versions Xen versions 4.1 through 4.2 Citrix XenServer version 6.0.2 and earlier Description The issue allows local HVM guest OS kernels to cause a denial of service host crash and possibly read hypervisor or guest memory. This is due to a missing rang...

PHYSDEVOP_map_pirq index vulnerability

ISSUE DESCRIPTION PHYSDEVOPmappirq with MAPPIRQTYPEGSI does not range check map-index. IMPACT A malicious HVM guest kernel can crash the host. It might also be able to read hypervisor or guest memory. VULNERABLE SYSTEMS All Xen systems running HVM guests. PV guests are not vulnerable. The...

Beijing Huasheng website management system injection vulnerability-vulnerability warning-the black bar safety net

Default background: admin/Login. asp Default password: admin 1 2 3 4 5 6 exp: http://www.xxxxx.com/showpt.asp?id=1568 and 1=2 union select 1,password,3,username,5,6,7,8,9,1 0,1 1,1 2,1 3,1 4,1 5 from admin Note: error will return to the home page. As the field does not, to construct their own it!...

iDev Rentals v1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications iDev Rentals v1.0 - Multiple Web Vulnerabilities Introduction: ============= idev-Rentals is a PHP Script special software for your website allows you to create an apartment / housing / accommodation rentals listing directory. You and your...

Mozilla: Multiple Use-after-free issues (MFSA 2012-58)

Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service game pause by connecting to the server and not finishing the 1 authorization phase or 2 map download, aka a "slow read" attack...

CVE-2012-0048

OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service game pause by connecting to the server and not finishing the 1 authorization phase or 2 map download, aka a "slow read" attack...

CVE-2012-0048: Undefined Security Weakness

OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service game pause by connecting to the server and not finishing the 1 authorization phase or 2 map download, aka a "slow read" attack...

Fedora 17 : redeclipse-1.2-12.fc17 (2012-11582)

A flaw was found in the way Red Eclipse handled config files. In cube2-engine games, game maps can be transmitted either from the server to a client, or from client to client. These maps include a config file mapname.cfg in 'cubescript' format, which allows for an attacker to send a malicious...

[SECURITY] Fedora 17 Update: redeclipse-1.2-12.fc17

A single-player and multi-player first-person ego-shooter, built on Cube Engine 2, which lends itself toward a balanced gameplay, completely at the control of map makers, while maintaining a general theme of agility in a variety of environments. Features: Balanced gameplay, with a general theme o...

Scientific Linux Security Update : autofs on SL5.x i386/x86_64

There was a security issue with the default installed configuration of autofs version 5 whereby the entry for the 'hosts' map did not specify the 'nosuid' mount option. A local user with control of a remote nfs server could create a setuid root executable within an exported filesystem on the remo...

Scientific Linux Security Update : samba on SL5.x, SL4.x, SL3.x i386/x86_64

Various bugs were found in NDR parsing, used to decode MS-RPC requests in Samba. A remote attacker could have sent carefully crafted requests causing a heap overflow, which may have led to the ability to execute arbitrary code on the server. CVE-2007-2446 Unescaped user input parameters were bein...

Scientific Linux Security Update : squid on SL5.x i386/x86_64

A flaw was found in the way Squid processed certain external ACL helper HTTP header fields that contained a delimiter that was not a comma. A remote attacker could issue a crafted request to the Squid server, causing excessive CPU use up to 100%. CVE-2009-2855 Note: The CVE-2009-2855 issue only...