UBUNTU-CVE-2015-8367

The phaseonecorrect function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization...

Google Picasa 'Phase One Tags' Buffer Overflow Vulnerability - Windows

Google Picasa is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:picasa";...

Google Picasa Heap Buffer Overflow Vulnerability

Google Picasa is a suite of applications for organizing and editing digital photos. An integer overflow vulnerability exists in Google Picasa 3.9.140 Build 239,Build 248, which can be exploited by a remote attacker to execute arbitrary code after triggering a heap buffer overflow with data relate...

Google Picasa 'phase one' tag integer overflow vulnerability

Google Picasa is a set of free image management tools. An integer overflow vulnerability exists in Google Picasa 'phase one' tag handling. A remote attacker can exploit this vulnerability to construct a malicious file and trick the application into parsing it, which could crash the application or...

ipsec-tools: racoon orphaned ph1s memory leak

src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" phase 1 handle when it has been initiated remotely, which allows remote attackers to cause a denial of service resource consumption...

PT-2006-4752 · Cisco · Cisco Ios +3

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions affected versions not specified VPN 3000 Concentrators versions affected versions not specified PIX firewalls versions affected versions not specified Description: The issue concerns the Internet Key Exchange IKE version 1...

racoon fails to verify signature during Phase 1

Ralf Spenneberg discovered a serious flaw in racoon. When using Phase 1 main or aggressive mode, racoon does not verify the client's RSA signature. Any installations using X.509 authentication are strongly urged to upgrade. Installations using pre-shared keys are believed to be unaffected...