security flaw

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

Fedora Core 1 : kernel-2.4.22-1.2188.nptl (2004-111)

A memory leak was fixed in an error path in the dofork routine. This was unlikely to have caused problems in real world situations. The information leak fixed in the previous errata was also found to affect XFS and JFS. The Common Vulnerabilities and Exposures project cve.mitre.org assigned the...

CVE-2004-0178

The OSS code for the Sound Blaster sb16 driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service crash via a sample with an odd number of bytes...

CVE-2004-0178

The OSS code for the Sound Blaster sb16 driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service crash via a sample with an odd number of bytes...

CVE-2004-0178

The vulnerability lies in the Linux 2.4.x sb16 Sound Blaster driver (OSS) in 16-bit mode; under odd-sized samples it can crash local users. Affects Linux 2.4.x before 2.4.26. Remediation: upgrade to Linux 2.4.26 or newer.

CVE-2004-0178

The OSS code for the Sound Blaster sb16 driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service crash via a sample with an odd number of bytes...

CVE-2004-0178: Undefined Security Weakness

The OSS code for the Sound Blaster sb16 driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service crash via a sample with an odd number of bytes...

CVE-2003-0700

The C-Media PCI sound driver in Linux before 2.4.22 does not use the getuser function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699...

CVE-2003-0700

The C-Media PCI sound driver in Linux before 2.4.22 does not use the getuser function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699...

CVE-2003-0700

The CVE-2003-0700 issue affects the C-Media PCI sound driver in Linux kernels older than 2.4.22. In certain conditions, the driver does not use the get_user function to access userspace, crossing security boundaries and potentially enabling exploitation of vulnerabilities (a different issue from ...

CVE-2003-0700: Undefined Security Weakness

The C-Media PCI sound driver in Linux before 2.4.22 does not use the getuser function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699...

CVE-2003-0699

The C-Media PCI sound driver in Linux before 2.4.21 does not use the getuser function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700...

CVE-2003-0699

The CVEs describe a vulnerability in the C-Media PCI sound driver for Linux. CVE-2003-0699 affects Linux kernel versions prior to 2.4.21, where the driver accesses userspace without using get_user, crossing security boundaries. CVE-2003-0700 similarly affects the driver in kernels prior to 2.4.22...

CVE-2003-0699

The C-Media PCI sound driver in Linux before 2.4.21 does not use the getuser function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700...

CVE-2003-0699: Undefined Security Weakness

The C-Media PCI sound driver in Linux before 2.4.21 does not use the getuser function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that address various security vulnerabilities are now available for Red Hat Enterprise Linux. The Linux kernel handles the basic functions of the operating system. Security issues have been found that affect the versions of the Linux kernel shipped with Red Hat Enterprise...

ICQ and MSIE allow execution of arbitrary code

Outline qoute I was about to put on a home page right after I discovered it and still had a hope that I will be that one who will finally destroy the world :: /quote Well i dont know if it will destroy the world, but sure enough it's enough to destory a small portion off it : Actually i found the...

Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification

Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification source: https://www.securityfocus.com/bid/5239/info ICQ is an instant messenger client for Microsoft Windows systems. ICQ includes support for sound schemes. ICQ sound scheme files are generally given the .scm extension...

Mirabilis ICQ 2002 - Sound Scheme Remote Configuration Modification

source: https://www.securityfocus.com/bid/5239/info ICQ is an instant messenger client for Microsoft Windows systems. ICQ includes support for sound schemes. ICQ sound scheme files are generally given the .scm extension. Reportedly, it is possible for a remote party to modify sound settings in IC...

5 bugs

Hi I want to advice about some bugs that founded by our team DHGroup :: www.dhgroup.org: 1. Eserv/2.97 www.eserv.ru This is shareware httpftppopsmtpproxy server. Directory travel vuln was founded in http-server. Exploit: www.somehost.com/somedir/? This url will show content of directory "somedir"...