OpenJDK ImageI/O JPEG heap overflow (6874643)

Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file...

Integer overflow

Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file...

CVE-2009-3874: Undefined Security Weakness

Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file...

IBM AIX 'rpc.cmsd'日历守护进程远程栈缓冲区溢出漏洞

Bugraq ID: 36615 IBM AIX是一款商业性质的操作系统。 IBM AIX rpc.cmsd存在缓冲区溢出问题，远程攻击者可以利用漏洞以root进程权限执行任意指令。 处理远程过程21的请求时存在漏洞，此函数接收两个参数，都为XDR字符串，当拷贝第一个参数到基于栈的缓冲区时，代码没有正确校验它的长度，可触发基于栈的缓冲区溢出。要利用此漏洞，攻击者需要通过RCP连接目标主机，不需要验证通过。 IBM Virtual I/O Server VIOS 2.1 IBM Virtual I/O Server VIOS 1.5.2 IBM Virtual I/O Server VIO...

CVE-2009-3043

The ttyldischangup function in drivers/char/ttyldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service system crash, sometimes preceded by a NULL pointer dereference or possibly gain privileges via certain pseudo-terminal I/O activity, as demonstrat...

CVE-2009-3043: Undefined Security Weakness

The ttyldischangup function in drivers/char/ttyldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a denial of service system crash, sometimes preceded by a NULL pointer dereference or possibly gain privileges via certain pseudo-terminal I/O activity, as demonstrat...

[SECURITY] Fedora 10 Update: squid-3.0.STABLE18-1.fc10

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Design/Logic Flaw

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806: Undefined Security Weakness

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-0156

Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service persistent Finder crash via a crafted Mach-O executable that triggers an out-of-bounds memory read...

CVE-2009-0156: Improper Input Validation

Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service persistent Finder crash via a crafted Mach-O executable that triggers an out-of-bounds memory read...

POP Peeper 3.4.0.0 .eml file Universal SEH Overwrite Exploit

Exploit for unknown platform in category local exploits ============================================================ POP Peeper 3.4.0.0 .eml file Universal SEH Overwrite Exploit ============================================================ POP Peeper 3.4.0.0 .eml file Universal SEH Overwrite Explo...

Mac OS X Inject Mach-O Bundle, Reverse TCP Stager

Inject a custom Mach-O bundle into the exploited process. Connect, read length, read buffer, execute This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework ReverseTcp ------- Mac OS X x86 Reverse TCP stager. module...

Mac OS X Inject Mach-O Bundle, Bind TCP Stager

Inject a custom Mach-O bundle into the exploited process. Listen, read length, read buffer, execute This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework BindTcp ------- Mac OS X x86 bind TCP stager. module MetasploitModule...

kernel: enforce a minimum SG_IO timeout

libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SGIO requests, which allows local users to cause a denial of service Programmed I/O mode on drives via multiple simultaneous invocations of an unspecified test program...

Fedora Update for squid FEDORA-2007-4170

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2007-4170 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CentOS Update for kernel CESA-2008:0211 centos3 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0211 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2009-0435

IBM WebSphere Application Server 6.1.x on AIX 5.3 is affected by a denial-of-service vulnerability in the IBM JMS AIO/libibmaio library (aio_getioev2 and getEvent). The issue exists in WAS 6.1.x before 6.1.0.17 and can cause a daemon crash. Remediation: upgrade to WAS 6.1.0.17 or later Fix Pack t...

MS Windows taskmgr.exe Information Disclosure Vulnerability

This host is running Windows Operating System and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodmstaskmgrinfodiscvuln.nasl 5363 2017-02-20 13:07:22Z cfi $ MS Windows taskmgr.exe Information Disclosure Vulnerability Authors: Sharath S Copyright: Copyright ...