tiff -- directory entry count integer overflow vulnerability

In an iDEFENSE Security Advisory infamous41md reports: Remote exploitation of a heap-based buffer overflow vulnerability within the LibTIFF package could allow attackers to execute arbitrary code. The vulnerability specifically exists due to insufficient validation of user-supplied data when...

DXFScope 0.2 - Remote Client-Side Buffer Overflow

DXFScope 0.2 - Remote Client-Side Buffer Overflow source: https://www.securityfocus.com/bid/11986/info A remote, client-side buffer overflow vulnerability reportedly affects the DXFscope utility. This issue is due to a failure of the application to properly sanitize user-supplied input prior to...

DXFScope 0.2 - Remote Client-Side Buffer Overflow

source: https://www.securityfocus.com/bid/11986/info A remote, client-side buffer overflow vulnerability reportedly affects the DXFscope utility. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it as the format specifier string in a...

Linux Kernel <= 2.6.9, <= 2.4.28 ip_options_get Local Overflow

Exploit for linux platform in category dos / poc ============================================================== Linux Kernel include include include include include include include include include int mainint ac,char av struct msghdr msghdr; struct iovec iovector10; int i,s; struct sockaddrin...

Convex 3D 0.8 - Buffer Overflow

Convex 3D 0.8 - Buffer Overflow source: https://www.securityfocus.com/bid/11995/info It is reported that Convex 3D is susceptible to a stack-based buffer overflow vulnerability. This issue is due to a failure of the application to properly check the bounds of user-supplied image data prior to...

Possible remote code execution

Description Remote exploitation of an integer overflow vulnerability in the smbd daemon included in Samba 2.0.x, Samba 2.2.x, and Samba 3.0.x prior to and including 3.0.9 could allow an attacker to cause controllable heap corruption, leading to execution of arbitrary commands with root privileges...

XLReader 0.9 - Remote Client-Side Buffer Overflow

source: https://www.securityfocus.com/bid/11970/info A remote, client-side buffer overflow vulnerability affects xlreader. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into static process buffers. An attacker may...

Linux Kernel 2.4.28/2.6.9 - 'ip_options_get' Local Overflow

/ int overflow in ipoptionsget Copyright Georgi Guninski Cannot be used in vulnerability databases like securityfocus and mitre / include include include include include include include include include include int mainint ac,char av struct msghdr msghdr; struct iovec iovector10; int i,s; struct...

MPG123 0.59 - Find Next File Remote Client-Side Buffer Overflow

MPG123 0.59 - Find Next File Remote Client-Side Buffer Overflow source: https://www.securityfocus.com/bid/11958/info A remote client-side buffer overflow vulnerability affects mpg123. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior ...

ABCPP 1.3 - Directive Handler Buffer Overflow

ABCPP 1.3 - Directive Handler Buffer Overflow source: https://www.securityfocus.com/bid/12021/info abcpp is prone to a buffer overflow vulnerability. This issue is exposed when the program is used to handle directives in ABC music notation files. Since the ABC files may originate from an external...

NASM 0.98.x - Error Preprocessor Directive Buffer Overflow

NASM 0.98.x - Error Preprocessor Directive Buffer Overflow source: https://www.securityfocus.com/bid/11991/info NASM is prone to a buffer overflow. This condition is exposed when the application attempts to assemble a source file that contains malformed '%error' preprocessor directive arguments...

GREED 0.81 - '.GRX' File List Buffer Overflow

source: https://www.securityfocus.com/bid/12033/info greed Get and Resume Elite Edition is prone to a buffer overflow vulnerability. The issue is exposed when the client processes GRX file lists. GRX file lists allow file downloads to be scripted. Since GRX file lists may originate from an extern...

PCAL 4.x - Calendar File get_holiday Remote Buffer Overflow

PCAL 4.x - Calendar File getholiday Remote Buffer Overflow source: https://www.securityfocus.com/bid/12036/info PCAL is prone to a buffer overflow vulnerability. This issue is exposed when the application handles a calendar file that contains excessively long holiday data. Since calendar files ma...

unrtf -- buffer overflow vulnerability

Yosef Klein and Limin Wang have found a buffer overflow vulnerability in unrtf that can allow an attacker to execute arbitrary code with the permissions of the user running unrtf, by running unrtf on a specially crafted rtf document...

PCAL 4.x - Calendar File 'getline' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12035/info PCAL is prone to a buffer overflow vulnerability. This issue is exposed when the application handles a calendar file that contains excessively long lines. Since calendar files may originate from an external or untrusted source, this vulnerabili...

CSV2XML 0.5.1 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/12027/info It is reported that csv2xml is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it into a fixed-size memory buffer. This vulnerability...

PCAL 4.x - Calendar File getline Remote Buffer Overflow

PCAL 4.x - Calendar File getline Remote Buffer Overflow source: https://www.securityfocus.com/bid/12035/info PCAL is prone to a buffer overflow vulnerability. This issue is exposed when the application handles a calendar file that contains excessively long lines. Since calendar files may originat...

Jef Moine abcm2ps 3.7.20 - .ABC File Remote Buffer Overflow

Jef Moine abcm2ps 3.7.20 - .ABC File Remote Buffer Overflow source: https://www.securityfocus.com/bid/12022/info abcm2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied da...

ABC2PSJCABC2PS 1.2 - Voice Field Buffer Overflow

ABC2PSJCABC2PS 1.2 - Voice Field Buffer Overflow source: https://www.securityfocus.com/bid/12024/info abc2ps and jcabc2ps are prone to a buffer overflow vulnerability. This issue is exposed when the program is used to process the voice field in ABC music notation files. Since the ABC files may...

iDEFENSE Security Advisory 12.14.04 - Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability

Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability iDEFENSE Security Advisory 12.14.04 www.idefense.com/application/poi/display?id=162&type=vulnerabilities December 14, 2004 I. BACKGROUND WordPad is a word processing application that uses the MFC rich edit control classes. It ...