emacs -- run-python vulnerability

Emacs developers report: The Emacs command run-python' launches an interactive Python interpreter. After the Python process starts up, Emacs automatically sends it the line: import emacs which normally imports a script named emacs.py which is distributed with Emacs. This script, which is typicall...

Adobe Album Starter 3.2 - Unchecked Local Buffer Overflow

Adobe Album Starter 3.2 - Unchecked Local Buffer Overflow Exploitable issue in various Adobe products c0ntex [email protected] Scott Laurie February 2008 Vulnerable applications, tested: Adobe Photoshop Album Starter Adobe After Effects CS3 Adobe Photoshop CS3 Not Vulnerable applications, tested:...

CVE-2008-1021

Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding...

Heap overflow

Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding...

CVE-2008-1021

Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding...

CVE-2008-1021: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted movie with run length encoding...

Opera 9.50 beta and prior remote DoS (freeze)

Name : Opera 9.50 beta / 9.24 Remote DoS Type : Remote DoS Credits: Gynvael Coldwind of Vexillium & Simey Impact : Low Short description Opera is vulnerable to a remote DoS attack, using spacially crafted BMP files, that causes the browser to freeze for a short amount of time around 4 minutes on...

AIX 520010 : U809746

The remote host is missing AIX PTF U809746 which is related to the security of the package bos.diag.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2002-2363

CVE-2002-2363 affects HP-UX 11.00 via the VJE.VJE-RUN component, which adds the bin directory to /etc/PATH, enabling local users to gain privileges. The vulnerability is rooted in PATH modification by VJE.VJE-RUN, with the described impact including potential privilege elevation. Exploitation det...

CVE-2002-2363

VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges...

CVE-2002-2363: Undefined Security Weakness

VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges...

[Reversemode Advisory] Microsoft DirectX RLE Compressed Targa Image File Heap Overflow

Microsoft DirectX Direct3D 9 Microsoft DirectX RLE Compressed Targa Image File Heap Overflow Ruben Santamarta rubenatreversemodedotcom 07.18.2007 Affected products: + Microsoft DirectX Direct3D 9 runtime libraries. + D3dx928.dll – D3dx9d28.dll and earlier Microsoft DirectX is prone to a heap...

CVE-2006-4183: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Microsoft DirectX SDK February 2006 and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding RLE compression that produces more data than expected when...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

MiniBill 1.2.5 - 'run_billing.php' Remote File Inclusion

======================================================= MiniBill 2007-04-09 v1.2.5 Remote File include Vulnerabilities ======================================================= Found By : Abo0od , [email protected] ======================================================= Homepage:...

CVE-2007-2998

The Pascal run-time library PAS$RTL.EXE before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service system crash via certain Pascal code...

CVE-2007-2998

CVE-2007-2998 affects the Pascal run-time library PAS$RTL.EXE on OpenVMS: OpenVMS for Integrity Servers 8.3 (before 20070418) and OpenVMS Alpha 8.3 (before 20070419). The issue is that PAS$RTL.EXE does not properly restore PC and PSL values, which enables local users to trigger a denial of servic...

CVE-2007-2998

The Pascal run-time library PAS$RTL.EXE before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service system crash via certain Pascal code...

CVE-2007-2998: Undefined Security Weakness

The Pascal run-time library PAS$RTL.EXE before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service system crash via certain Pascal code...

Design/Logic Flaw

Use-after-free vulnerability in the Client/Server Run-time Subsystem CSRSS in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a...