CVE-2008-5008

Buffer overflow in src/srcsinc.c in Secret Rabbit Code aka SRC or libsamplerate before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file...

CVE-2008-5008

CVE-2008-5008 : Buffer overflow in Secret Rabbit Code (libsamplerate) src_sinc.c prior to 0.1.4 when using extreme low conversion ratios. This allows user-assisted attackers to trigger a remotely exploitable condition by processing a specially crafted audio file, potentially leading to arbitrary ...

CVE-2008-5008: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in src/srcsinc.c in Secret Rabbit Code aka SRC or libsamplerate before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file...

GNU Enscript src/psgen.c栈溢出漏洞

BUGTRAQ ID: 31858 CVECAN ID: CVE-2008-3863 GNU enscript是用于替换Adobe enscript程序的脚本。Enscript可将ASCII文件转换为PostScript并将生成的PostScript输出提供给指定的打印机。 GNU enscript src/psgen.c文件中的readspecialescape函数存在栈溢出漏洞。如果用户通过-e选项启用了特殊转义处理的话，在转换恶意文件时就可能触发这个溢出，导致执行任意指令。 GNU Enscript 1.6.4 beta GNU Enscript 1.6.1 GNU ---...

CVE-2008-3863: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the readspecialescape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e aka special escapes processing option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename...

CVE-2008-4522: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

CVE-2008-4071: Improper Input Validation

A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows remote attackers to cause a denial of service browser crash via an src property value with an invalid acroie:// URL...

CVE-2008-3904: Improper Input Validation

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2008-3791: Improper Link Resolution Before File Access

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file...

CVE-2008-3577: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttdmain function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments...

CVE-2008-3576: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted string. NOTE: some of these details are obtained from third party information...

CVE-2008-3583: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long URL in the SRC attribute of an IMG element. NOTE: this might be related to CVE-2008-3360. NOTE: it was later reported that 2.08 Beta 4 is also affected...

minix-panic.txt

Hello again, another day.. kokanin@gmail 20080724 minix 3.1.2a remote tty panic trunk/src/drivers/tty/tty.c 14965 if status = sendreplyee, &ttymess != OK 14966 panic"TTY","ttyreply failed, status\n", status; $ while true ; do sleep 1 && killall nc 2/dev/null; done & $ while true ; do cat...

CVE-2008-3294: Improper Control of Generation of Code

src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it...

IBM AFP查看器插件SRC属性堆溢出漏洞

BUGTRAQ ID: 29932 IBM的AFP查看器插件允许用户在WEB浏览器中查看AFP文档。 AFP查看器插件在处理文档中的SRC属性时存在堆溢出漏洞，如果用户打开的文档包含有超过1023个字符的超长属性参数的话，就可以触发这个溢出，导致执行任意指令。 IBM AFP Viewer 3.2.1.1 IBM AFP Viewer 2.0.7.1 IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Heap overflow

Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2880: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the IBM AFP Viewer Plug-in 2.0.7.1 and 3.2.1.1 allows remote attackers to execute arbitrary code via a long SRC property value. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Authentication flaw

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

DEBIAN-CVE-2008-0960

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

Directory traversal

Multiple directory traversal vulnerabilities in Project-Based Calendaring System PBCS 0.7.1-1 allow remote attackers to read arbitrary files via a .. dot dot in the filename parameter to 1 src/yopysync.php and 2 system-logger/printlogs.php...