buffer overflows

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter libwpd before 0.8.9 allow user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not proper...

Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)

Unspecified vulnerability in the IEEE 802.11 dissector in Wireshark formerly Ethereal 0.10.14 through 0.99.4 allows remote attackers to cause a denial of service application crash via unspecified vectors...

MOPB-03-2007:PHP Variable Destructor Deep Recursion Stack Overflow

Summary The last vulnerability for today is similar to the second one. This time the bug is however a deep recursion bug in the Zend Engine variable destruction. User input is parsed in an iterative way which allows the creation of very deeply nested array structures from user input. However when...

security flaw

The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via certain vectors that trigger memory corruption...

security flaw

Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeetingloginsert function...

PT-2007-2255 · Microsoft · Windows 2000 +2

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 6.0 SP1 on Windows 2000 Microsoft Internet Explorer version 6.0 SP2 on Windows XP Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and...

DEBIAN-CVE-2007-0457

Unspecified vulnerability in the IEEE 802.11 dissector in Wireshark formerly Ethereal 0.10.14 through 0.99.4 allows remote attackers to cause a denial of service application crash via unspecified vectors...

UBUNTU-CVE-2007-0255

XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...

PT-2006-1091 · Ksirc · Ksirc

Name of the Vulnerable Software and Affected Versions: KsIRC versions 1.3.12 KsIRC versions prior to 3.5.5-r1 Description: The issue allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server. This results in an...

AIDeX Mini-WebServer 1.1 - Remote Crash (Denial of Service)

import socket print "---------------------------------------------------------------------" print " AID'eX Mini-Webserver Verion 1.1 early Release 3 Denial of Service" print " url: http://www.aidex.de/software/webserver/" print " author: shinnai" print " mail: shinnaiatautisticidotorg" print "...

AIDeX Mini-WebServer 1.1 - Remote Crash (Denial of Service)

AIDeX Mini-WebServer 1.1 - Remote Crash Denial of Service import socket print "---------------------------------------------------------------------" print " AID'eX Mini-Webserver Verion 1.1 early Release 3 Denial of Service" print " url: http://www.aidex.de/software/webserver/" print " author:...

CVE-2006-6751

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

Microsoft Windows - DNS Resolution Remote Denial of Service (PoC) (MS06-041)

!/usr/bin/python POC for MS06-041 Run the python script passing the local ip address as parameter. The DNS server will start listening on this ip address for DNS hostname resolution queries. This script is for testing and educational purpose and so to test this one will have to point the DNS...

security flaw

Off-by-one error in the MIME Multipart dissector in Wireshark formerly Ethereal 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service crash via certain vectors that trigger an assertion error related to unexpected length values...

DEBIAN-CVE-2006-5748

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors that trigger memory...

DEBIAN-CVE-2006-4574

Off-by-one error in the MIME Multipart dissector in Wireshark formerly Ethereal 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service crash via certain vectors that trigger an assertion error related to unexpected length values...

DEBIAN-CVE-2006-5468

Unspecified vulnerability in the HTTP dissector in Wireshark formerly Ethereal 0.99.3 allows remote attackers to cause a denial of service crash via unspecified vectors...

RevilloC MailServer 1.x - 'RCPT TO' Remote Denial of Service

/ ============================================================= 0-day RCPT TO DoS Exploit for RevilloC SMTP version 1.x ============================================================= Sending a large buffer 4080 bytes in conjunction with the "MAIL FOR:" or "RCPT TO:" and other commands can cause a...

security flaw

Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted pixmap image...

security flaw

The Unidirectional Lightweight Encapsulation ULE decapsulation component in dvb-core/dvbnet.c in the dvb driver in the Linux kernel 2.6.17.8 allows remote attackers to cause a denial of service crash via an SNDU length of 0 in a ULE packet...