Adobe Flash Player Multimedia File Remote Buffer Overflow Vulnerability

Description Adobe Flash Player is prone to a remote buffer-overflow vulnerability when handling multimedia files with certain tags. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in...

PECL 3.0.x - Alternative PHP Cache Extension apc_search_paths() Remote Buffer Overflow

PECL 3.0.x - Alternative PHP Cache Extension apcsearchpaths Remote Buffer Overflow source: https://www.securityfocus.com/bid/28457/info PECL Alternative PHP Cache APC extension is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input...

CVE-2008-1489

Integer overflow in the MP4ReadBoxrdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984...

iDefense Security Advisory 03.18.08: Multiple Vendor CUPS CGI Heap Overflow Vulnerability

iDefense Security Advisory 03.18.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 18, 2008 I. BACKGROUND The Common UNIX Printing System, more commonly referred to as CUPS, provides a standard printer interface for various Unix based operating systems. For more information, visit the...

Rosoft媒体播放器RML文件处理栈溢出漏洞

BUGTRAQ ID: 28258 Rosoft是Rosoft Engineering开发的一款简单易用的多媒体播放器。 Rosoft在处理畸形格式的RML文件时存在漏洞，如果用户受骗使用Rosoft媒体播放器打开了特制的RML文件的话，就可能触发栈溢出，导致执行任意指令。 Rosoft Engineering Rosoft Media Player 4.1.8 Rosoft Engineering ------------------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

rosoft-dos.txt

Description: This is nothing special - there is just flaw in Rosoft Media Player 4.1.8, similar to one discovered by Juan Pablo Lopez Yacubian. This one concerns RML file. This is Stack Based Buffer Overflow vulerability - we can ovewrite EIP. I hope that it was not reported before. Author: Wikto...

CVE-2008-1189

CVE-2008-1189 is described as a buffer overflow in Java Web Start affecting Sun JDK/JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier. The description indicates remote arbitrary-code execution via unknown vectors, in a different issue from CVE-2008-1188. Conn...

CVE-2008-0986

Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows remote attackers to execute arbitrary code via a crafted BMP file with a header containing a negative offset field...

Microsoft Works File Converter index table vulnerability

Added: 02/22/2008 CVE: CVE-2008-0105 BID: 27658 OSVDB: 41458 Background The Microsoft Works File Converter allows Microsoft Office to open Microsoft Works files. Problem A buffer overflow vulnerability in the Microsoft Works File Converter allows arbitrary command execution when a user opens a .w...

Ask.com Toolbar AskJeevesToolBar.SettingsPlugin.1 ActiveX (askBar.dll) ShortFormat Property Arbitrary Code Execution

The AskJeevesToolBar.SettingsPlugin.1 ActiveX control, part of the Ask Toolbar, is installed on the remote host. It reportedly contains a buffer overflow that can be triggered with a long value for the 'ShortFormat' property. If a remote attacker can trick a user on the affected host into visitin...

Microsoft Windows WebDAV Mini-Redirector Heap Overflow Vulnerability

Description Microsoft Windows is prone to a heap-overflow vulnerability in the WebDAV Mini-Redirector component also known as the Web Client service. This vulnerability may be triggered by a malicious WebDAV response. A successful exploit could let a remote attacker execute arbitrary code with...

Larson Network Print Server 9.4.2 build 105 - LstNPS Logging Function USEP Command Remote Format String

Larson Network Print Server 9.4.2 build 105 - LstNPS Logging Function USEP Command Remote Format String source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker c...

Yahoo Music Jukebox MediaGrid ActiveX buffer overflow

Added: 02/11/2008 CVE: CVE-2008-0625 BID: 27578 OSVDB: 41051 Background Yahoo! Music Jukebox is a music player capable of playing, ripping, and burning MP3s and CDs, creating and sharing playlists, streaming radio stations, and purchasing music. Problem A buffer overflow vulnerability in the...

larson-poc.txt

Luigi Auriemma Application: Larson Software Technology Network Print Server http://www.cgmlarson.com/products/NetworkPrintServer.php Versions: = 9.4.2 build 105 Platforms: Windows Bugs: A format string in logging B license buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...

QuickTime < 7.4.1 RTSP Response Long Reason-Phrase Arbitrary Remote Code Execution (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.4.1. Such versions contain a heap-based buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled. If an attacker can trick a user into visiting a specially crafted webpage, arbitrar...

Chat vulnerabilities in TinTin++ 1.97.9

Luigi Auriemma Application: TinTin++ / WinTin++ http://tintin.sourceforge.net Versions: = 1.97.9 Platforms: Windows, Linux and Mac Bugs: A chat buffer-overflow B chat YES NULL pointer C chat home folder empty files creation Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail:...

Firebird 2.0.3 Relational Database - protocol.cpp XDR Protocol Remote Memory Corruption

Firebird 2.0.3 Relational Database - protocol.cpp XDR Protocol Remote Memory Corruption source: https://www.securityfocus.com/bid/27403/info Firebird is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to...

Cisco Unified Communications Manager CTL Provider Heap Overflow (CVE-2008-0027)

Cisco Unified Communications Manager provides voice, video, mobility, and presence services. The Cisco Certificate Trust List CTL Provider service handles authentication and certificate requests for the Cisco Unified Communications Manager. A buffer overflow vulnerability exists in the Certificat...

Debian Security Advisory DSA 1153-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1153-1. Damian Put discovered a heap overflow vulneravility in the UPX unpacker of the ClamAV anti-virus toolkit which could allow remote attackers to execute arbitrary code or cause denial of service. OpenVAS Vulnerability...

Debian Security Advisory DSA 186-1 (log2mail)

The remote host is missing an update to log2mail announced via advisory DSA 186-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...