CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

DEBIAN-CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

OpenSSH S/Key远程信息泄露漏洞

OpenSSH是一款流行的加密安全shell应用实现。 在使用S/KEY的情况下OpenSSH存在信息泄露问题，远程攻击者可以利用漏洞获得系统帐户的敏感信息。 如果"ChallengeResponseAuthentication"设置为"Yes"默认设置，SH允许用户通过使用'ssh userid:skey at hostname'形式的S/KEY登录，一般的SSH行为如： =============================================================================== alucard $ ssh user at...

[security bulletin] HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System (PFS), Remote Increase in Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00913684 Version: 1 HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System PFS, Remote Increase in Privilege NOTICE: The information in this Security Bulletin should be acted upon as...

CVE-2007-1728

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

Design/Logic Flaw

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

CVE-2007-1728

The CVE-2007-1728 entry concerns Sony PlayStation 3 (firmware 1.60) and PlayStation Portable (firmware 3.10 OE-A). The vulnerability arises from the Remote Play feature, where remote attackers can trigger a denial-of-service by flooding the affected device with UDP datagrams. The documents explic...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

JVN#93700808 Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone

Impact An arbitrary script could be executed in an inappropriate security zone. Solution Products Affected Sleipnir 2.49 and earlier Portable Sleipnir 2.45 and earlier RSS bar for Sleipnir 1.28 Release3 and earlier...

Nokia Intellisync Portable Device Detection (deprecated)

Binary data 3374.prm...

Clam AntiVirus fails to properly handle crafted Portable Executable (PE) files

Overview A vulnerability in the way Clam AntiVirus processes Portable Executable PE files may lead to execution of arbitrary code. Description Clam AntiVirus is a GPL virus scanner that has built-in support for for a number of file types including PE. According to iDefense Public Advisory:...

Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (2)

Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation 2 source: https://www.securityfocus.com/bid/20471/info The Netscape Portable Runtime API running on Sun Solaris 10 operating system is prone to a local privilege-escalation vulnerability. A successful exploit of this iss...

Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (2)

source: https://www.securityfocus.com/bid/20471/info The Netscape Portable Runtime API running on Sun Solaris 10 operating system is prone to a local privilege-escalation vulnerability. A successful exploit of this issue allows an attacker to gain superuser privileges, completely compromising the...

CVE-2006-4182

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service scanning service crash and execute arbitrary code via a crafted Portable Executable PE file that leads to a heap-based buffer overflow when less memory is allocated...

DEBIAN-CVE-2006-4182

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service scanning service crash and execute arbitrary code via a crafted Portable Executable PE file that leads to a heap-based buffer overflow when less memory is allocated...

CVE-2006-4182

The CVE-2006-4182 issue affects ClamAV versions 0.88.1, 0.88.4 and earlier than 0.88.5. It is caused by a heap-based buffer overflow when processing a crafted Portable Executable (PE) file, due to insufficient memory allocation, enabling remote attackers to crash the scanning service and potentia...

Debian DSA-974-1 : gpdf - buffer overflows

SuSE researchers discovered heap overflow errors in xpdf, the Portable Document Format PDF suite, which is also present in gpdf, the GNOME version of the Portable Document Format viewer, and which can allow attackers to cause a denial of service by crashing the application or possibly execute...

Debian DSA-1019-1 : koffice - several vulnerabilities

Derek Noonburg has fixed several potential vulnerabilities in xpdf, the Portable Document Format PDF suite, which is also present in koffice, the KDE Office Suite. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...

Debian DSA-940-1 : gpdf - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in gpdf, the GNOME version of the Portable Document Format viewer, and which can lead to a denial of service by crashing the application or possibly...

Debian DSA-931-1 : xpdf - buffer overflows

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, that can lead to a denial of service by crashing the application or possibly to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...