PT-2023-26512 · Unknown +1 · Ghostscript +1

Name of the Vulnerable Software and Affected Versions: ghostscript affected versions not specified Description: An integer overflow flaw was found in pl glyph name in pcl/pl/plfont.c:418 of ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted...

Exploit for CVE-2023-28615

CVE-2023-29929: Remote "Instakill" DoS in Kemp LoadMaster via...

SUSE CVE-2021-31535

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request intended for server-side color lookup contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allow...

The vulnerability of the EXAMINE command implementation in the IMAP service of the IBM Domino email system allows a perpetrator to execute arbitrary code.

The vulnerability of the EXAMINE command implementation in the IMAP service of the IBM Domino email system is related to the escape of operations beyond the buffer in memory during the processing of mailbox names. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

DEBIAN-CVE-2021-31535

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request intended for server-side color lookup contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allow...

UBUNTU-CVE-2021-31535

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request intended for server-side color lookup contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allow...

SUSE-SU-2021:14724-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3483: Fixed a use-after-free in nosy.c bsc1184393. - CVE-2021-30002: Fixed a memory leak for large arguments in videousercopy bsc1184120. -...

CVE-2019-5177

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.0214. The destination buffer sp+0x440 is overflowed with the call to sprintf for any domainname values that are greater than...

UBUNTU-CVE-2019-17113

In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlugInstrumentName and ModPlugSampleName in libopenmptmodplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer overflow...

UBUNTU-CVE-2017-9432

Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer overflow related to the DatabaseName::read function in lib/StarWriterStruct.cxx...

VulnCheck KEV: CVE-2017-1274

IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute arbitrary code by specifying a large mailbox name. IBM X-Force ID: 124749...

ICU stack buffer overflow vulnerability

ICU is a C/C++ and Java library that provides Unicode and globalization support for software applications. A remote stack buffer overflow vulnerability exists in the 'ulocgetDisplayName' function in versions prior to ICU 54.1, which stems from a program that fails to adequately perform bounds...

git: path_name() integer truncation and overflow leading to buffer overflow

An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or server to crash or, possibly,...

Git 'path_name()' heap buffer overflow vulnerability

Git is a free, open source distributed version control system. A security vulnerability exists in Git version 2.7.3, which can be exploited by an attacker to cause a denial of service heap buffer overflow...

Git 'path_name()' heap buffer overflow vulnerability (CNVD-2016-01735)

Git is a free, open source distributed version control system. A security vulnerability exists in versions of Git prior to 2.7.1, which can be exploited by an attacker to cause a denial of service heap buffer overflow...

freetype security update

2.1.4-15.el3 - Add freetype-2.1.4-axis-name-overflow.patch Avoid overflow when dealing with names of axes - Resolves: 614014 2.1.4-14.el3 - Add freetype-2.1.4-CVE-2010-2527.patch Use precision for '%s' where appropriate to avoid buffer overflows - Resolves: 614014 2.1.4-13.el3 - Add...

Winamp Playlist UNC Path Computer Name Overflow

This module exploits a vulnerability in the Winamp media player. This flaw is triggered when an audio file path is specified, inside a playlist, that consists of a UNC path with a long computer name. This module delivers the playlist via the browser. This module has only been successfully tested ...

Mozilla Thunderbird < 1.0.7 IDN URL Domain Name Overflow

The remote host is using Mozilla Thunderbird, an email client. The remote version of this software contains various security issues that could allow an attacker to execute arbitrary code on the remote host and to disguise URLs. C Tenable Network Security, Inc. include"compat.inc"; if description...

wodftpcrash.txt

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCT WodFtpDLX is an ActiveX component that supports encrypted and non-encrypted FTP access to the servers for transferring files. It can be used in various programs, scripts, web applications to connect to F...

MDaemon POP Server User Name Overflow DoS

The remote host is running the MDaemon POP server. It is possible to crash the remote service by sending a too long 'user' command. This problem allows an attacker to make the remote MDaemon service crash, thus preventing legitimate users from receiving emails. C Tenable Network Security, Inc...