qemu -- unchecked block read/write vulnerability

Ian Jackson reports on the debian-security mailinglist: When a block device read or write request is made by the guest, nothing checks that the request is within the range supported by the backend, but the code in the backend typically assumes that the request is sensible. Depending on the backen...

Information disclosure

LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obtain sensitive information about private cards...

CVE-2007-2640

LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obtain sensitive information about private cards...

CVE-2007-2640

Summary: CVE-2007-2640 affects LibTMCG before 1.1.1, where a missing range check to prevent trivial group generators may lead to disclosure of information about private cards. The vulnerability is classified with a CVSS v2 base score of 7.8 (HIGH) with network attack vector and no authentication ...

CVE-2007-2640

LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obtain sensitive information about private cards...

SUSE-SA:2005:056: XFree86-server,xorg-x11-server

The remote host is missing the patch for the advisory SUSE-SA:2005:056 XFree86-server,xorg-x11-server. The X server memory can be accessed my a malicious X client by exploiting a missing range check in the function XCreatePixmap. This bug can probably be used to execute arbitrary code with the...

CVE-2004-1777

CVE-2004-1777 describes a range-check error in Skype for Windows prior to 0.98.0.28 that can be triggered by excessively long command line arguments or a long callto:// URL, leading to a denial of service (application crash). The issue affects Skype for Windows versions before 0.98.0.28 and is di...