Debian DSA-2026-1 : netpbm-free - stack-based buffer overflow

Marc Schoenefeld discovered a stack-based buffer overflow in the XPM reader implementation in netpbm-free, a suite of image manipulation utilities. An attacker could cause a denial of service application crash or possibly execute arbitrary code via an XPM image file that contains a crafted header...

[SECURITY] [DSA 2026-1] New netpbm-free packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2026-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 02, 2010 http://www.debian.org/security/faq -...

CVE-2010-0838

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Orac...

CVE-2010-0513

Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PostScript document...

Orbital Viewer File Processing Buffer Overflow Vulnerabilities

Orbital Viewer is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1185

SAP MaxDB contains a vulnerability in the serv.exe component where a handshake packet is used to derive a length for a stack copy, enabling a stack-based buffer overflow leading to remote code execution. The issue affects SAP MaxDB versions 7.4.3.32 and 7.6.0.37 through 7.6.06, with the vulnerabl...

CVE-2009-4756

Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execute arbitrary code via a long string in a malformed playlist .m3u file...

CVE-2009-4761

Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long string in a .smi file...

CVE-2010-0731

The gnutlsx509crtgetserial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1readvalue with a pointer to the wrong data type and the wrong length value, which allows remote attackers to bypass the certificate revocation list CRL check and cau...

UltraISO CCD File Parsing Buffer Overflow

$Id: ultraisoccd.rb 8900 2010-03-24 19:35:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2010-0619

Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser printers and multi-function printers allows remote attackers to execute arbitrary code or cause a denial of service device hang via a long argument t...

Orbital Viewer ORB File Parsing Buffer Overflow

$Id: orbitalviewerorb.rb 8757 2010-03-09 05:57:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

openSUSE Security Update : libnetpbm-devel (libnetpbm-devel-2011)

This update of netpbm fxes a stack-based buffer overflow that could be triggered while processing the contents of XPM headers in image files. CVE-2009-4274: CVSS v2 Base Score: 5.8 moderate AV:N/AC:M/Au:N/C:N/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11 Security Update : libnetpbm (SAT Patch Number 1999)

This update of netpbm fxes a stack-based buffer overflow that could be triggered while processing the contents of XPM headers in image files. CVE-2009-4274: CVSS v2 Base Score: 5.8 moderate AV:N/AC:M/Au:N/C:N/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : libnetpbm-devel (libnetpbm-devel-2011)

This update of netpbm fxes a stack-based buffer overflow that could be triggered while processing the contents of XPM headers in image files. CVE-2009-4274: CVSS v2 Base Score: 5.8 moderate AV:N/AC:M/Au:N/C:N/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2009-4676

Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long title in a FLAC file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4668

JetAudio jetCast Title Processing Buffer Overflow (CVE-2009-4668) involves a stack-based overflow in JetCast.exe 2.0.4.1109 used by jetAudio 7.5.2 and 7.5.3.15. An attacker can trigger arbitrary code execution by providing a crafted long ID3 tag in an MP3 file, due to a buffer overflow in the Tit...

CVE-2009-2754

Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager ISM Portmapper service aka portmap.exe, as used in IBM Informix Dynamic Server IDS 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execut...

CVE-2009-4660

Stack-based buffer overflow in the AntServer Module AntServer.exe in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660...

CVE-2009-4660

CVE-2009-4660: BigAnt IM Server 2.50 has a stack-based buffer overflow in the AntServer.exe module (AntServer) that lets a remote attacker execute arbitrary code by sending a long GET request to TCP port 6660. Affected: BigAnt IM Server 2.50 (and related references note the BigAnt server family)....