security flaw

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...

Ethereal 0.10.9 (Linux) - '3G-A11' Remote Buffer Overflow

/ Ethereal 0.10.9 and below proof-of-concept remote root exploit c 2005 Diego Giagio The CDMA2000 A11 protocol dissector packet-3g-a11.c has a stack overflow vulnerability when decoding Airlink records. This vulnerability was also discovered by Diego Giagio on 01/March/2005. The vendor was...

SafeNet Sentinel License Manager vulnerable to buffer overflow

Overview SafeNet Sentinel License Manager contains a buffer overflow vulnerability, which may allow a remote unauthenticated attacker to execute arbitrary code on the server. Description SafeNet Sentinel License Manager LM is a software-based license management application. It is reported that th...

[Full-disclosure] [ GLSA 200503-13 ] mlterm: Integer overflow vulnerability

Gentoo Linux Security Advisory GLSA 200503-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Critical: Red Hat Security Advisory: HelixPlayer security update

An updated HelixPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A stack based buffer overflow bug was found in HelixPlayer's Synchronized...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player. A stack based buffer overflow bug was found in RealPlayer's Synchronized...

iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Checksum Buffer Overflow

Computer Associates License Client/Server GCR Checksum Buffer Overflow iDEFENSE Security Advisory 03.02.05 www.idefense.com/application/poi/display?id=215&type=vulnerabilities March 2, 2005 I. BACKGROUND The Computer Associates License Client/Server applications provide a method for CA products t...

[VulnWatch] RealOne Player / Real .WAV Heap Overflow File Format Vulnerability

Mark Litchfield of NGSSoftware has discovered a high risk Heap Overflow vulnerability in the .WAV file format when being opened by either of the following products: Windows: RealPlayer 10.5 6.0.12.1056 and below RealPlayer 10 RealOne Player V2 RealOne Player V1 RealPlayer 8 RealPlayer Enterprise...

Trillian Basic 3.0 - .png Image Processing Buffer Overflow

Trillian Basic 3.0 - .png Image Processing Buffer Overflow See-security Technologies ltd. http://www.see-security.com Trillian 3.0 PNG Image Processing Buffer overflow Exploit Discovered and coded by: Tal zeltzer import sys import struct Addresses are compatible with Windows XP Service Pack 1...

Trend Micro VSAPI ARJ Handling Heap Overflow

The remote host is running a version of the Trend Micro engine that has a heap overflow vulnerability in the ARJ handling functions. An attacker may exploit this flaw to bypass virus protection altogether and execute arbitrary code on the remote host. To exploit this flaw, an attacker would need ...

CVE-2004-1587

Buffer overflow in Monolith games including 1 Alien versus Predator 2 1.0.9.6 and earlier, 2 Blood 2 2.1 and earlier, 3 No one lives forever 1.004 and earlier and 4 Shogo 2.2 and earlier allows remote attackers to cause a denial of service application crash via a long secure Gamespy query...

CVE-2004-1636

Heap-based buffer overflow in the WvTFTPServer::newconnection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet...

Knox Arkeia Backup Client 5.3.3 Type 77 (OSX) - Overflow (Metasploit)

Knox Arkeia Backup Client 5.3.3 Type 77 OSX - Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

cabrightstor_disco.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

[UNIX] Buffer Overflow in OSH

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

HP-UX PHSS_29737 : HP-UX Running dtmailpr Software, Local Root Privileges. (HPSBUX00300 SSRT3667 rev.2)

s700800 11.23 CDE Base Periodic Patch : A potential buffer overflow exists in a function called by the suid root program dtmailpr. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS29737. The text itself is...

[Full-Disclosure] [gentoo-announce] [ GLSA 200502-22 ] wpa_supplicant: Buffer overflow vulnerability

Gentoo Linux Security Advisory GLSA 200502-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200502-22 : wpa_supplicant: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200502-22 wpasupplicant: Buffer overflow vulnerability wpasupplicant contains a possible buffer overflow due to the lacking validation of received EAPOL-Key frames. Impact : An attacker could cause the crash of wpasupplicant using...

CVE-2005-0416

The Windows Animated Cursor ANI capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow...

GLSA-200502-05 : Newspost: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200502-05 Newspost: Buffer overflow vulnerability Niels Heinen has discovered a buffer overflow in the socketgetline function of Newspost, which can be triggered by providing long strings that do not end with a newline character...