CVE-2014-3802

msdia.dll in Microsoft Debug Interface Access DIA SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service...

Memory corruption

msdia.dll in Microsoft Debug Interface Access DIA SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-3802

msdia.dll in Microsoft Debug Interface Access DIA SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-3802

The CVE-2014-3802 issue affects msdia.dll (Microsoft Debug Interface Access Library) in Visual Studio prior to 2013. The root cause is a failure to validate an unspecified variable when calculating a dynamic-call address while parsing PDB files, leading to memory corruption. Impact per sources: r...

Microsoft DIA SDK msdia.dll Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Debug Interface Access SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Altap Salamander 2.5 PE Viewer - Local Buffer Overflow (Metasploit)

$Id: altapsalamanderpdb.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

DEBIAN-CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

Heap overflow

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

CVE-2010-2575

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via ...

CVE-2010-2575

CVE-2010-2575 affects Okular (KDE SC 4.3.0–4.5.0). A heap-based overflow in the RLE decompression path (TranscribePalmImageToJPEG in generators/plucker/inplug/image.cpp) can be triggered by a crafted image inside a PDB/PDF, enabling either a crash or remote arbitrary code execution. Multiple conn...

KDE okular buffer overflow

Dynamic memory overflow on PDB files processing...

Secunia Research: KDE Okular PDB Parsing RLE Decompression Buffer Overflow

====================================================================== Secunia Research 25/08/2010 - KDE Okular PDB Parsing RLE Decompression Buffer Overflow - ====================================================================== Table of Contents Affected...

Fedora 13 : kdegraphics-4.4.5-3.fc13 (2010-13629)

CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability. For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 12 : kdegraphics-4.4.5-3.fc12 (2010-13661)

CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability. For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Ubuntu 9.04 / 9.10 / 10.04 LTS : kdegraphics vulnerability (USN-979-1)

Stefan Cornelius of Secunia Research discovered a boundary error during RLE decompression in the 'TranscribePalmImageToJPEG' function in generators/plucker/inplug/image.cpp of okular when processing images embedded in PDB files, which can be exploited to cause a heap-based buffer overflow...

Fedora 14 : kdegraphics-4.5.0-2.fc14 (2010-13589)

CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability. For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Altap Salamander 2.5 PE Viewer Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Altap...