GLSA-200705-08 : GIMP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200705-08 GIMP: Buffer overflow Marsu discovered that the 'setcolortable' function in the SUNRAS plugin is vulnerable to a stack-based buffer overflow. Impact : An attacker could entice a user to open a specially crafted .RAS file...

Gimp 2.2.14 .RAS File Download/Execute Buffer Overflow Exploit (win32)

Exploit for unknown platform in category local exploits ====================================================================== Gimp 2.2.14 .RAS File Download/Execute Buffer Overflow Exploit win32 ====================================================================== / :: Kristian Hermansen :: Dat...

GIMP buffer overflow

Buffer overflow in SUNRAS plugin on RAS files parsing...

Stack overflow

Stack-based buffer overflow in the setcolortable function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file...

DEBIAN-CVE-2007-2356

Stack-based buffer overflow in the setcolortable function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file...

CVE-2007-2356

Stack-based buffer overflow in the setcolortable function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file...

CVE-2007-2356

Stack-based buffer overflow in the setcolortable function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file...

CVE-2007-2356

Stack-based buffer overflow in the setcolortable function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file...

Gimp SUNRAS插件set_color_table()缓冲区溢出漏洞

GIMP是GNU Image Manipulation Program（GNU图像处理程序）的缩写，是一款跨平台的图像处理软件。 GIMP的SUNRAS插件处理还有畸形数据的RAS文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 SUNRAS插件中setcolortable函数中存在栈溢出漏洞，plug-ins/common/sunras.c文件中漏洞代码如下： int ncols, j; guchar ColorMap2563; ncols = sunhdr-lrasmaplength / 3; if ncols = 0 return; for j = 0; j...

CVE-2002-0366

CVE-2002-0366 describes a buffer overflow in the Windows RAS phonebook service that allows a local user to execute arbitrary code with LocalSystem privileges by crafting a long dial-up entry in rasphone.pbk. Affected products include Windows NT 4.0 (and Terminal Server Edition), Windows 2000, Win...

3com RAS 1500 / Wyse Winterm Malformed Packet Remote DoS

It was possible to crash the remote host by sending a specially crafted IP packet with a null length for IP option 0xE4 An attacker may use this flaw to prevent the remote host from accomplishing its job properly. C Tenable Network Security, Inc. THIS SCRIPT WAS NOT TESTED ! will only work with...

3Com SuperStack II RAS 1500 - IP Header Denial of Service

// source: https://www.securityfocus.com/bid/7175/info vulnerability has been reported in the 3Com SuperStack II RAS 1500 router. The problem occurs when processing network packets containing malicious IP headers. When received, the packet may cause the router to crash. / 3com superstack II RAS...

Multiple bugs in 3COM RAS 1500

Invalid IP options DoS, Web interface unauthorized access...

3Com SuperStack II RAS 1500 - Unauthorized Access

source: https://www.securityfocus.com/bid/7176/info A vulnerability has been reported in 3Com RAS 1500 router that may allow attackers to access sensitive data. Specifically, RAS 1500 devices fail to carry out authentication when requests are made for various files that may contain sensitive...

3Com SuperStack II RAS 1500 - Unauthorized Access

3Com SuperStack II RAS 1500 - Unauthorized Access source: https://www.securityfocus.com/bid/7176/info A vulnerability has been reported in 3Com RAS 1500 router that may allow attackers to access sensitive data. Specifically, RAS 1500 devices fail to carry out authentication when requests are made...

3Com SuperStack II RAS 1500 - IP Header Denial of Service

3Com SuperStack II RAS 1500 - IP Header Denial of Service // source: https://www.securityfocus.com/bid/7175/info vulnerability has been reported in the 3Com SuperStack II RAS 1500 router. The problem occurs when processing network packets containing malicious IP headers. When received, the packet...

3com RAS 1500 Remote vulnerabilities.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: 3com RAS 1500 Remote vulnerabilities. Product: 3C433279A-US http://www.3com/ras1500 Version: Firmware X2.0.10 URL: http://isec.pl/vulnerabilities/isec-0009-3com-ras.txt Author: Piotr Chytla [email protected] Date: February 27, 2003 Issue: - ------...

UTStarcom B-NAS 1000 / B-RAS 1000 Major Security Flaw

== Overview == UTStarcom http://www.ustar.com is a broadband DSLAM and DSL SMS hardware vendor. Their products are used to manage DSL through PPPoE, PPPoA, bridge mode etc. == Vulnerability == The vendor UTStarcom has placed 2 backdoor accounts with full system access in their BAS-1000 system B-R...

Microsoft RAS Phonebook buffer overflow

Buffer overflow...

MS02-029: Windows RAS Local Overflow (318138)

An overflow in the RAS phonebook service allows a local user to execute code on the system with the privileges of LocalSystem. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11029; scriptversion"1.41"; scriptcvsdate"Date: 2018/11/15 20:50:29";...