2244 matches found
CVE-2007-1378
The CVE-2007-1378 issue affects the PHP Ovrimos extension: ovrimos_longreadlen allows context-dependent attackers to write to arbitrary memory via result_id and length arguments. Affected: PHP with Ovrimos extension prior to 4.4.5. Impact per sources: partial confidentiality/integrity/availabilit...
CVE-2007-1375
CVE-2007-1375 relates to an integer overflow in PHP’s substr_compare function in PHP 5.2.1 and earlier, allowing a context‑dependent attacker to read sensitive memory when a large length argument is processed. The connected advisories (e.g., Ubuntu USN-455-1 and related OpenVAS entries) list CVE-...
CVE-2004-2680
CVE-2004-2680 affects mod_python (libapache2-mod-python) 3.1.4 and earlier. The root cause is improper handling of output filters when processing more than 16,384 bytes, causing filter.read to return portions of previously freed memory. Practical impact is a potential data exposure and instabilit...
CVE-2006-6797
The Client Server Run-Time Subsystem CSRSS in Microsoft Windows allows local users to cause a denial of service crash or read arbitrary memory from csrss.exe via crafted arguments to the NtRaiseHardError function with status 0x50000018, a different vulnerability than CVE-2006-6696...
CVE-2006-6150
PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the OWLLIBROOT parameter...
CVE-2006-5174
The copyfromuser function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that...
Hack tutorial of dove gray VIP2006 ultimate free kill technology-vulnerability warning-the black bar safety net
This time for everyone to do a variety of antivirus softwarefree to killtutorial. This tutorial is mainly to dove gray VIP2006 service terminal, for example! Now online a lot offree to killtutorial, and I've seen a lot, but thefree to killthe effect is not very good, with not a few days will be...
CVE-2006-5174
CVE-2006-5174 concerns the Linux kernel 2.6 copy_from_user() implementation on s390/s390x where a local user could read kernel memory due to improper clearing of a kernel buffer. Affected platform: Linux kernel 2.6 before 2.6.19-rc1 on s390. The issue is an information leak (partial confidentiali...
Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (1)
// source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it to an insufficiently sized...
Information disclosure
net/ipv4/afinet.c in Linux kernel 2.4 does not clear sockaddrin.sinzero before returning IPv4 socket names from the 1 getsockname, 2 getpeername, and 3 accept functions, which allows local users to obtain portions of potentially sensitive memory...
CVE-2006-1342
net/ipv4/afinet.c in Linux kernel 2.4 does not clear sockaddrin.sinzero before returning IPv4 socket names from the 1 getsockname, 2 getpeername, and 3 accept functions, which allows local users to obtain portions of potentially sensitive memory...
CVE-2006-0294
Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory...
CVE-2006-0294
Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory...
CVE-2006-0379
FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory...
CVE-2005-3534
Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...
CVE-2005-2128
QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value...
CVE-2005-2128
The CVE-2005-2128 issue affects Microsoft DirectShow (QUARTZ.DLL) used by Windows Media Player 9. A lack of validation of the AVI file’s strn element length allows a crafted .avi to cause a memory write (null byte) to an arbitrary location, enabling remote code execution. The vulnerability is exp...
thunderbird security update
CentOS Errata and Security Advisory CESA-2005:601 Updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and...
CVE-2001-1517
RunAs runas.exe in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying tha...