Debian DSA-176-1 : gv - buffer overflow

Zen-parse discovered a buffer overflow in gv, a PostScript and PDF viewer for X11. This problem is triggered by scanning the PostScript file and can be exploited by an attacker sending a malformed PostScript or PDF file. The attacker is able to cause arbitrary code to be run with the privileges o...

Debian DSA-075-1 : netkit-telnet-ssl - remote exploit

The telnet daemon contained in the netkit-telnet-ssl0.16.3-1 package in the 'stable' potato distribution of Debian GNU/Linux is vulnerable to an exploitable overflow in its output handling. The original bug was found by , and announced to bugtraq on Jul 18 2001. At that time, netkit-telnet versio...

Debian DSA-224-1 : canna - buffer overflow and more

Several vulnerabilities have been discovered in canna, a Japanese input system. The Common Vulnerabilities and Exposures CVE project identified the following vulnerabilities : - CAN-2002-1158 BugTraq Id 6351: 'hsj' of Shadow Penguin Security discovered a heap overflow vulnerability in the...

Debian DSA-183-1 : krb5 - buffer overflow

Tom Yu and Sam Hartman of MIT discovered another stack-based buffer overflow in the kadmserwrapin function in the Kerberos v4 administration server. This kadmind bug has a working exploit code circulating, hence it is considered serious. The MIT krb5 implementation includes support for version 4,...

Debian DSA-060-1 : fetchmail - buffer overflow

Wolfram Kleff found a problem in fetchmail: it would crash when processing emails with extremely long headers. The problem was a buffer overflow in the header parser which could be exploited. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

Debian DSA-523-1 : www-sql - buffer overflow

Ulf Harnhammar discovered a buffer overflow vulnerability in www-sql, a CGI program which enables the creation of dynamic web pages by embedding SQL statements in HTML. By exploiting this vulnerability, a local user could cause the execution of arbitrary code by creating a web page and processing...

Debian DSA-081-1 : w3m - Buffer Overflow

In SNS Advisory No. 32 a buffer overflow vulnerability has been reported in the routine which parses MIME headers that are returned from web servers. A malicious web server administrator could exploit this and let the client web browser execute arbitrary code. w3m handles MIME headers included in...

Debian DSA-228-1 : libmcrypt - buffer overflows and memory leak

Ilia Alshanetsky discovered several buffer overflows in libmcrypt, a decryption and encryption library, that originates from improper or lacking input validation. By passing input which is longer than expected to a number of functions multiple functions are affected the user can successfully make...

Debian DSA-301-1 : libgtop - buffer overflow

The gtop daemon, used for monitoring remote machines, contains a buffer overflow which could be used by an attacker to execute arbitrary code with the privileges of the daemon process. If started as root, the daemon process drops root privileges, assuming uid and gid 99 by default. This bug was...

YahooPOPS buffer overflow

Buffer overflow on oversized POP3 USER command and any SMTP request...

Zinf .pls File Overflow

Binary data 2327.prm...

Buffer overflow in Zinf 2.2.1 for Win32

I don't know why this bug has not been tracked but moreover I don't completely know why it has not been fixed yet in the Windows version of Zinf. In short, Zinf is an audio player for Linux and Windows: http://www.zinf.org The latest Linux version is 2.2.5 while the latest Windows version is 2.2....

Alt-N MDaemon 6.5.1 - IMAPSMTP Remote Buffer Overflow

Alt-N MDaemon 6.5.1 - IMAPSMTP Remote Buffer Overflow ///////////////////////////////////////////////////////////// // Remote proof-of-concept exploit // // for // // Mdaemon IMAP server v6.5.1 // // and // // possible other version. // // Find bug: DBuG. // // Author: DBuG. // // [email protected] // /...

LaTeX2rtf 1.9.15 - Remote Buffer Overflow

/ source: https://www.securityfocus.com/bid/11233/info It is reported that LaTeX2rtf is susceptible to a remote buffer overflow vulnerability when handling malformed files. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable computer to gain unauthorized acces...

[SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 548-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 548-1] New imlib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 548-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 547-1] New Imagemagic packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 547-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0827

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via malformed 1 AVI, 2 BMP, or 3 DIB files...

Microsoft Office WordPerfect 5.x Converter contains a buffer overflow vulnerability

Overview A buffer overflow vulnerability in the Microsoft Office WordPerfect 5.x Converter could allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Office WordPerfect 5.x Converter allows users to convert documents in WordPerfect format to Microsof...

Microsoft Windows GDI+ contains a buffer overflow vulnerability in the JPEG parsing component

Overview A buffer overflow vulnerability in the Microsoft Windows GDI+ JPEG parsing component could allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Windows Graphics Device Interface GDI+ is an application programming interface API that provides...