Debian DSA-1244-1 : xine-lib - buffer overflow

It was discovered that the Xine multimedia library performs insufficient sanitising of Real streams, which might lead to the execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

DSA-1244-1 xine-lib

Bulletin has no description...

People kid large redirection command in the Security aspects of the application-vulnerability warning-the black bar safety net

As we all know, DOS has a not for everyone the commonly used command-redirect command, this little thing is very useful, the command can also be used for Win9x/ME/2 0 0 0/XP, the flexible use of this command can bring us great convenience-whether invasion or defensive or is it a system app, will...

Easy File Sharing Web Server protection bypass

By using alternative NTFS-streams it's possible to retrieve protected data, including accounts and passwords...

ruby -- multiple vulnerabilities

Secunia reports: Two vulnerabilities have been reported in Ruby, which can be exploited by malicious people to bypass certain security restrictions. An error in the handling of the "alias" functionality can be exploited to bypass the safe level protection and replace methods called in the trusted...

libextractor buffer overflow

Heap memory overflow on ASF streams and QuickTime parsing...

GLSA-200604-16 : xine-lib: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-16 xine-lib: Buffer overflow vulnerability Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the input data supplied by the user before copying it to an...

Design/Logic Flaw

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

CVE-2006-1475

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

CVE-2006-1475

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

CVE-2006-1475: Undefined Security Weakness

Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams ADS filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windo...

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

Sql injection

Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB05 in the a Data Pump component; 2 DB15 in the b Oracle Text component; 3 DB22 in the c Streams Apply component; 4 DB23 and 5 DB24 in th...

CVE-2006-0269

Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln DB25. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent...

CVE-2006-0260

Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB05 in the a Data Pump component; 2 DB15 in the b Oracle Text component; 3 DB22 in the c Streams Apply component; 4 DB23 and 5 DB24 in th...

CVE-2006-0260

CVE-2006-0260 affects Oracle Database Server 9.2.0.7 and 10.1.0.5. The issue is described as a SQL injection vulnerability in SYS.DBMS_METADATA_UTIL (and related DBMS_METADATA packages) caused by insufficient input validation in multiple functions (e.g., LONG2VARCHAR/DBMS_METADATA_UTIL; MAKE_FILT...

CVE-2006-0260: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB05 in the a Data Pump component; 2 DB15 in the b Oracle Text component; 3 DB22 in the c Streams Apply component; 4 DB23 and 5 DB24 in th...

CVE-2006-0269: Improper Neutralization of Special Elements used in an SQL Command

Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln DB25. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent...

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...