7174 matches found
CVE-2004-1275
Buffer overflow in the removequote function in convert.c for html2hdml 1.0.3 allows remote attackers to execute arbitrary code via a crafted HTML file...
iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability
Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=172&type=vulnerabilities December 21, 2004 I. BACKGROUND Xpdf is an open-source viewer for Portable Document Format PDF files. II. DESCRIPTION Remote...
iDEFENSE Security Advisory 12.21.04: Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow Vulnerability
Multiple Vendor Xine version 0.99.2 PNM Handler PNATAG Heap Overflow Vulnerability iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=176&type=vulnerabilities December 21, 2004 I. BACKGROUND Xine is a multimedia player which runs on multiple platforms. More informatio...
[SECURITY] [DSA 614-1] New xzgv packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 614-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2004 http://www.debian.org/security/faq -...
AIX 5.1/5.2/5.3 local root exploits
hi, i found some local security holes in IBM's AIX versions 5.1, 5.2 and 5.3 unix for IBM RS/6000 powerpc. 1 the first is a bug in all setuid diag related tools that use an environment variable as a prefix to an external binary executed as root. 2 the second is a classical stack overflow in a too...
ImageMagick -- PSD handler heap overflow vulnerability
An iDEFENSE Security Advisory reports: Remote exploitation of a buffer overflow vulnerability in The ImageMagick's Project's ImageMagick PSD image-decoding module could allow an attacker to execute arbitrary code. Exploitation may allow attackers to run arbitrary code on a victim's computer if th...
DSA-614-1 xzgv - integer overflows
Bulletin has no description...
WinRAR buffer overflow
Buffer overflow on file deletion...
curl -- authentication buffer overflow vulnerability
Two iDEFENSE Security Advisories reports: An exploitable stack-based buffer overflow condition exists when using NT Lan Manager NTLM authentication. The problem specifically exists within Curlinputntlm defined in lib/httpntlm.c. Successful exploitation allows remote attackers to execute arbitrary...
Crystal FTP Pro buffer overflow
Buffer overflow on oversized file extension in directory listing...
[SECURITY] [DSA 611-1] New htget packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 611-1 [email protected] http://www.debian.org/security/ Martin Schulze December 20th, 2004 http://www.debian.org/security/faq -...
GLSA-200412-18 : abcm2ps: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200412-18 abcm2ps: Buffer overflow vulnerability Limin Wang has located a buffer overflow inside the putwords function in the abcm2ps code. Impact : A remote attacker could convince the victim to download a specially crafted ABC...
NASM: Buffer overflow vulnerability
Background NASM is a 80x86 assembler that has been created for portability and modularity. NASM supports Pentium, P6, SSE MMX, and 3DNow extensions. It also supports a wide range of objects formats ELF, a.out, COFF, ..., and has its own disassembler. Description Jonathan Rockway discovered that...
Hitachi Cosminexus Web Contents Generator buffer overflow
No description provided...
[SA13518] Cosminexus Web Contents Generator Buffer Overflow Vulnerability
TITLE: Cosminexus Web Contents Generator Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13518 VERIFY ADVISORY: http://secunia.com/advisories/13518/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Cosminexus Server 4.x http://secunia.com/product/4393/...
O3Read 0.0.3 - HTML Parser Buffer Overflow
source: https://www.securityfocus.com/bid/12000/info o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is possible that files may originate from an...
RHEL 2.1 / 3 : zip (RHSA-2004:634)
An updated zip package that fixes a buffer overflow vulnerability is now available. The zip program is an archiving utility which can create ZIP-compatible archives. A buffer overflow bug has been discovered in zip when handling long file names. An attacker could create a specially crafted path...
iDEFENSE Security Advisory 12.16.04: Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability
Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=169 December 16, 2004 I. BACKGROUND Backup Exec is a next generation backup and restore solution for Microsoft Windows server...
tiff -- directory entry count integer overflow vulnerability
In an iDEFENSE Security Advisory infamous41md reports: Remote exploitation of a heap-based buffer overflow vulnerability within the LibTIFF package could allow attackers to execute arbitrary code. The vulnerability specifically exists due to insufficient validation of user-supplied data when...
RHEL 3 : samba (RHSA-2004:670)
Updated samba packages that fix an integer overflow vulnerability are now available for Red Hat Enterprise Linux 3. Samba provides file and printer sharing services to SMB/CIFS clients. Greg MacManus of iDEFENSE Labs has discovered an integer overflow bug in Samba versions prior to 3.0.10. An...