CVE-2009-1956

CVE-2009-1956: Off-by-one error in apr_brigade_vprintf in Apache APR-util before 1.3.5 on big-endian platforms. Remote attackers could obtain sensitive information or cause a denial of service (application crash) via crafted input. Affected product: APR-util (pre-1.3.5) used with APR/httpd; impac...

NSD (Name Server Daemon) 'packet.c' Off-By-One Buffer Overflow Vulnerability

NSD Name Server Daemon is prone to an off-by-one buffer overflow vulnerability because the server fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

FreeType off-by-one flaws

Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via 1 a crafted table in a Printer Font Binary PFB file or 2 a crafted SHC instruction in a TrueType Font TTF file, which triggers a heap-based buffer overflow...

DEBIAN-CVE-2009-1755

Off-by-one error in the packetreadquerysection function in packet.c in nsd 3.2.1, and processquerysection in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow...

Irssi 0.8.13 - 'WALLOPS' Message Off-by-One Heap Memory Corruption

source: https://www.securityfocus.com/bid/35399/info Irssi is prone to an off-by-one, heap-based, memory-corruption vulnerability because it fails to properly bounds-check user-supplied data before copying it into a memory buffer. Attackers can exploit this issue to crash the vulnerable client,...

Irssi 0.8.13 - WALLOPS Message Off-by-One Heap Memory Corruption

Irssi 0.8.13 - WALLOPS Message Off-by-One Heap Memory Corruption source: https://www.securityfocus.com/bid/35399/info Irssi is prone to an off-by-one, heap-based, memory-corruption vulnerability because it fails to properly bounds-check user-supplied data before copying it into a memory buffer...

Apache Httpd < 2.2.12 : APR-util off-by-one overflow

An off-by-one overflow flaw was found in the way the bundled copy of the APR-util library processed a variable list of arguments. An attacker could provide a specially-crafted string as input for the formatted output conversion routine, which could, on big-endian platforms, potentially lead to th...

Fedora 10 : DevIL-1.7.5-2.fc10 (2009-0867)

Fix missing symbols rh 480269 - Fix off by one error in CVE-2008-5262 check rh 479864 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Mandriva Linux Security Advisory : nasm (MDVSA-2008:120)

An off-by-one error was found in nasm 2.02 that allowed context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow CVE-2008-2719. The updated packages have been patched to prevent this issue...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2007:155)

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:229)

An off-by-one error was found in ClamAV versions prior to 0.94.1 that could allow remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted VBA project file CVE-2008-5050. Other bugs have also been corrected in 0.94.1 which is being provided with this update...

FreeBSD : ModSecurity for Apache 2.x remote off-by-one overflow (c2e10368-77ab-11d8-b9e8-00e04ccb0a62)

When the directive 'SecFilterScanPost' is enabled, the Apache 2.x version of ModSecurity is vulnerable to an off-by-one overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

Mandriva Update for clamav MDVSA-2008:003 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2008:003 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for clamav MDVSA-2008:229 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2008:229 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for tcpdump MDKSA-2007:056 (tcpdump)

Check for the Version of tcpdump OpenVAS Vulnerability Test Mandriva Update for tcpdump MDKSA-2007:056 tcpdump Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for rsync MDKSA-2007:166 (rsync)

Check for the Version of rsync OpenVAS Vulnerability Test Mandriva Update for rsync MDKSA-2007:166 rsync Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for libpng MDKSA-2007:217 (libpng)

Check for the Version of libpng OpenVAS Vulnerability Test Mandriva Update for libpng MDKSA-2007:217 libpng Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Microsoft GDIPlus Library File Integer Overflow Vulnerability

This host is having GDIPlus Library and is prone to Integer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbgdiplusintoverflowvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Microsoft GDIPlus Library File Integer Overflow Vulnerability Authors: Sujit Ghosal Copyright c 2009 Greenbone Networks...

Microsoft GDIPlus Library File Integer Overflow Vulnerability

GDIPlus Library is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UltraISO Off By One Overflow

UltraISO xpl.ui my $poc= "\x55\x6C\x74\x72\x61\x49\x53\x4F\x20\x50\x72\x6F\x6A\x65\x63\x74". "\x20\x10\x20\x20\xC8\x14\x52\x02\x02\x02\x02\x01\xF2\x02\x02\x02". "\x01\x12\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02". "\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"...