498 matches found
FreeBSD fw_ioctl()整数溢出内存信息泄露漏洞
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD dev/firewire/fwdev.c文件中的fwioctl函数存在整数溢出漏洞，本地攻击者可能利用此漏洞获取敏感信息。 在dev/firewire/fwdev.c的以下代码段中： if crombuf-len len len = crombuf-len; else crombuf-len = len; err = copyoutptr, crombuf-ptr, len;...
Update Protection against Microsoft Excel Vulnerabilities (MS06-037)
Microsoft Excel is prone to multiple vulnerabilities that may allow remote attackers to take any action with an affected system. When Excel opens a specially crafted Excel file that results from the processing of a malformed file, it may corrupt system memory, potentially allowing for remote code...
Microsoft Internet Explorer fails to handle specially crafted, invalid HTML
Overview Microsoft Internet Explorer IE fails to properly handle malformed HTML. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description IE fails to properly handle specially crafted HTML. When a specially crafted, malformed HTML file is opened...
Design/Logic Flaw
Unspecified vulnerability in the pagedata subsystem of the process file system /proc in Solaris 8 through 10 allows local users to cause a denial of service system hang or panic via unknown attack vectors that cause cause the kmemoversize arena to allocate a large amount of system memory that doe...
Mandrake Linux Security Advisory : ethereal (MDKSA-2005:193-2)
Ethereal 0.10.13 is now available fixing a number of security vulnerabilities in various dissectors : - the ISAKMP dissector could exhaust system memory - the FC-FCS dissector could exhaust system memory - the RSVP dissector could exhaust system memory - the ISIS LSP dissector could exhaust syste...
SUSE-SA:2005:067: kernel
The remote host is missing the patch for the advisory SUSE-SA:2005:067 kernel. This kernel update for SUSE Linux 10.0 contains fixes for XEN, various security fixes and bug fixes. This update includes a more recent snapshot of the upcoming XEN 3.0. Many bugs have been fixed. Stability for x8664 h...
ClamAV < 0.86.3 Content-parsing Multiple Overflows (deprecated)
Binary data 3229.prm...
Linux Kernel 2.4.232.6.0 - do_mremap() Bound Checking Validator (1)
Linux Kernel 2.4.232.6.0 - domremap Bound Checking Validator 1 / EDB Note: This will just "test" the vulnerability. EDB Note: An exploit version can be found here https://www.exploit-db.com/exploits/145/ / / Proof-of-concept exploit code for domremap Copyright C 2004 Christophe Devine and Julien...
Microsoft Windows Workstation Service Remote Buffer Overflow Vulnerability
Description It has been reported that Microsoft Windows Workstation WKSSVC.DLL service is prone to a vulnerability that may allow a remote attacker to gain unauthorized access to a vulnerable host. The problem is in the handling of requests by the Workstation Service. The Workstation Service does...
xfstt 1.21.4 - Memory Disclosure
xfstt 1.21.4 - Memory Disclosure source: https://www.securityfocus.com/bid/8255/info xfstt is reported to be prone to an unspecified memory disclosure vulnerability. This issue can be triggered by remote attackers to cause a denial of service. The server may also return details about the memory...
xfstt 1.2/1.4 - Memory Disclosure
source: https://www.securityfocus.com/bid/8255/info xfstt is reported to be prone to an unspecified memory disclosure vulnerability. This issue can be triggered by remote attackers to cause a denial of service. The server may also return details about the memory layout of the underlying system wh...
Privilege escalation applet, Java Media Framework
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Bugtraqqers, this is the proof-of-concept code for the vulnerability described in http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert2F54760 The code shows that there is more in this vulnerability than crash the vm, it allows to read and write...
Upclient 5.0 b7 - Command Line Argument Buffer Overflow
// source: https://www.securityfocus.com/bid/7703/info upclient has been reported prone to a buffer overflow vulnerability when handling command line arguments of excessive length. It is possible for a local attacker to seize control of the vulnerable application and have malicious arbitrary code...
Pserv 2.0 - User-Agent HTTP Header Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/6286/info A buffer overflow vulnerability has been reported in Pserv. The buffer overflow condition is due to the way Pserv handles data streams from remote connections. An attacker can exploit this vulnerability by issuing a HTTP request with an overl...
Microsoft Windows NT 4.02000 - TCP Stack Denial of Service (2)
Microsoft Windows NT 4.02000 - TCP Stack Denial of Service 2 // source: https://www.securityfocus.com/bid/3967/info An issue exists in Windows which could cause the TCP stack to consume all available system memory. This is achieved if a user sends numerous empty TCP packets to a host on port 139...
Microsoft Windows NT 4.02000 - TCP Stack Denial of Service (1)
Microsoft Windows NT 4.02000 - TCP Stack Denial of Service 1 // source: https://www.securityfocus.com/bid/3967/info An issue exists in Windows which could cause the TCP stack to consume all available system memory. This is achieved if a user sends numerous empty TCP packets to a host on port 139...
Behold! Software Web Page Counter 2.7 - Denial of Service
source: https://www.securityfocus.com/bid/267/info A set of vulnerabilities in the counter.exe web hit counter program enables denial of service attacks. A malicious user can create a malformed like ",1" entry in the counter.log file by requesting a URL of the form...
