MDVA-2008:013 : skencil

The package for the drawing application Skencil contained a bug which causes it not to be able to access the system fonts correctly. Consequently, it was impossible to enter text properly in Skencil, and Skencil would consume a high level of system resources if you attempt to use the text tools...

Mandriva Update for skencil MDVA-2008:013 (skencil)

Check for the Version of skencil OpenVAS Vulnerability Test Mandriva Update for skencil MDVA-2008:013 skencil Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

openSUSE 10 Security Update : rsh (rsh-5584)

in.rexecd was not using the system wide limits, potentially allowing remote rexec users to exhaust all system resources. This patch fixes it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Nokia Web Browser for S60 - Infinite Array Sort Denial of Service

source: https://www.securityfocus.com/bid/31703/info Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files. A successful exploit of this issue allows remote attackers to consume excessive system resources in the affected browser, which will cau...

Ruby 1.9 - WEBrick::HTTP::DefaultFileHandler Crafted HTTP Request Denial of Service

Ruby 1.9 - WEBrick::HTTP::DefaultFileHandler Crafted HTTP Request Denial of Service source: https://www.securityfocus.com/bid/30644/info Ruby is prone to multiple vulnerabilities that can be leveraged to bypass security restrictions or cause a denial of service: - Multiple security-bypass...

Ruby 1.9 - Safe Level Multiple Function Restriction Bypass

source: https://www.securityfocus.com/bid/30644/info Ruby is prone to multiple vulnerabilities that can be leveraged to bypass security restrictions or cause a denial of service: - Multiple security-bypass vulnerabilities occur because of errors in the 'safe level' restriction implementation...

Security fix for the ALT Linux 5 package netpbm version 10.35.30-alt1

Aug. 20, 2007 Alexey Tourbin 10.35.30-alt1 - 10.33 - 10.35.30 from netpbm.svn.sourceforge.net repo + fixes buffer overflow in pamtofits CVE-2006-3145 - sync RedHat patches Jindrich Novy, 10.35-14 + pamscale won't waste all system resources by usage of uninitialized variables for output image...

Apple QuickTime for Java security bypass vulnerability

Overview Apple QuickTime for Java fails to properly restrict the instantiation and manipulation of Java objects. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple QuickTime includes the ability to integrate QuickTim...

GLSA-200705-20 : Blackdown Java: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200705-20 Blackdown Java: Applet privilege escalation Chris Evans has discovered multiple buffer overflows in the Sun JDK and the Sun JRE possibly related to various AWT and font layout functions. Tom Hawtin has discovered an...

Zoo 2.10 - .ZOO Compression Algorithm Remote Denial of Service

/ source: https://www.securityfocus.com/bid/23823/info The Zoo compression algorithm is prone to a remote denial-of-service vulnerability. This issue arises when applications implementing the Zoo algorithm process certain malformed archives. A successful attack can exhaust system resources and...

Beast privilege escalation

Unchecked result of setuid call can be exploited by user with exhausting system resources...

PulseAudio 0.9.5 - 'Assert()' Remote Denial of Service

source: https://www.securityfocus.com/bid/23240/info PulseAudio is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to consume excessive system resources until the software becomes unresponsive to further calls, effectively denying service to...

PulseAudio 0.9.5 - Assert() Remote Denial of Service

PulseAudio 0.9.5 - Assert Remote Denial of Service source: https://www.securityfocus.com/bid/23240/info PulseAudio is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to consume excessive system resources until the software becomes unresponsive to...

AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. The x86 emulation Sun's J2SE Development Kit for AMD64 contains a vulnerable version of Sun's JDK. Description Chris Evans has discovered multiple buffer overflows in Sun JDK and Su...

Sun JDK/JRE: Execution of arbitrary code

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description A anonymous researcher discovered that an error in the handling of a GIF image with a zero width field block leads to a memory corruption flaw. Impact An attacker could...

Sun JDK/JRE: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description Chris Evans has discovered multiple buffer overflows in Sun JDK and Sun JRE possibly related to various AWT or font layout functions. Tom Hawtin has discovered an...

Code injection

Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows attackers to obtain "unintended privileged access to data and system resources" via unspecified vectors, related to 1...

HP DECNet-Plus For OpenVMS未明安全绕过漏洞

HP DECNet-Plus是一款遵循七层 OSI 参考模型并支持众多的标准OSI协议。 HP DECNet-Plus For OpenVMS存在未明安全绕过，远程攻击者可以利用漏洞绕过限制访问敏感数据或系统资源。 目前没有详细漏洞细节提供。 HP DECnet-Plus for OpenVMS VAX 7.3 HP DECnet-Plus for OpenVMS ALPHA 7.3-2 可参考如下安全公告获得解决方案： ftp://ftp.itrc.hp.com/openvmspatches/alpha/V7.3-2/AXPDNVOSIMUP01-V0703-2.txt...

Hang the overflow type net horse a trick-vulnerability warning-the black bar safety net

Has been cross-domain script-type net horse than the overflow-type network of the horse are popular, the reason is overflow type net horse will consume a large amount of system resources causing IE freezes or even crash. Think about if a spill type net horse hung slightly with the flow of the sit...

Microsoft Windows Print Spooler service fails to properly handle RPC requests

Overview The Microsoft Windows Print Spooler fails to properly handle malformed RPC requests. This vulnerability may allow a remote attacker to cause a denial-of-service condition. Description The Microsoft Print Spooler service manages printing operations on a system. The Print Spooler service...