Integer overflow

Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PICT image with a crafted 0x77 Poly tag and a crafted length field, whi...

GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= GrabIt 1.7.2x NZB DTD Reference Buffer Overflow Exploit ======================================================= !/usr/bin/perl theroadoutsidemyhouseispavedwithgoodintentions.pl AKA Grab...

HP-UX Update for BIND v920 HPSBUX00290

Check for the Version of BIND v920 OpenVAS Vulnerability Test HP-UX Update for BIND v920 HPSBUX00290 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Uguestbook 1.0b - 'Guestbook.mdb' Arbitrary Database Disclosure

!/usr/bin/perl Uguestbook 1.0 mdb-database/guestbook.mdb use LWP::Simple; use LWP::UserAgent; print "\tUguestbook 1.0 Arbitrary Database Disclosure Exploit\n"; print "\t\n"; print "\t Found And Exploited By : Cyber-Zone ABDELKHALEK \n"; print "\t E-mail : Paradisdesfousathotmail.fr \n"; print "\t...

Mandrake Security Advisory MDVSA-2009:093 (mpg123)

The remote host is missing an update to mpg123 announced via advisory MDVSA-2009:093. OpenVAS Vulnerability Test $Id: mdksa2009093.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:093 mpg123 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : vim vulnerabilities (USN-712-1)

Jan Minar discovered that Vim did not properly sanitize inputs before invoking the execute or system functions inside Vim scripts. If a user were tricked into running Vim scripts with a specially crafted input, an attacker could execute arbitrary code with the privileges of the user invoking the...

GLSA-200904-15 : mpg123: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200904-15 mpg123: User-assisted execution of arbitrary code The vendor reported a signedness error in the storeid3text function in id3.c, allowing for out-of-bounds memory access. Impact : A remote attacker could entice a user to...

CVE-2009-1301

Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtain...

DEBIAN-CVE-2009-1301

Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtain...

CVE-2009-1301

Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtain...

mpg123: User-assisted execution of arbitrary code

Background mpg123 is a realtime MPEG 1.0/2.0/2.5 audio player for layers 1, 2 and 3. Description The vendor reported a signedness error in the storeid3text function in id3.c, allowing for out-of-bounds memory access. Impact A remote attacker could entice a user to open an MPEG-1 Audio Layer 3 MP3...

W2B Restaurant 1.2 - 'conf.inc' Configuration File Disclosure

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

phpAdBoard - 'conf.inc' Remote Configuration File Disclosure

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Microsoft Internet Explorer 'EMBED' Tag Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

CVE-2008-6682

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of 1 " double quote characters in the href attribute of an s:a tag and 2...

Mandriva Update for vim MDVSA-2008:236-1 (vim)

Check for the Version of vim OpenVAS Vulnerability Test Mandriva Update for vim MDVSA-2008:236-1 vim Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for vim MDVSA-2008:236 (vim)

Check for the Version of vim OpenVAS Vulnerability Test Mandriva Update for vim MDVSA-2008:236 vim Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for mplayer MDVSA-2008:045 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2008:045 mplayer Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

gstreamer-plugins-base: integer overflow in gst_vorbis_tag_add_coverart()

Integer overflow in the gstvorbistagaddcoverart function gst-libs/gst/tag/gstvorbistag.c in vorbistag in gst-plugins-base aka gstreamer-plugins-base before 0.10.23 in GStreamer allows context-dependent attackers to execute arbitrary code via a crafted COVERART tag that is converted from a base64...

Apple Safari XML解析器嵌套XML标记远程拒绝服务漏洞

BUGTRAQ ID: 34318 CNCAN ID：CNCAN-2009040101 Apple Safari是一款流行的WEB浏览器。 Apple Safari处理XML标签存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建包含嵌套的XML标签的WEB页，诱使Apple Safari解析，可导致应用程序崩溃。 Apple Safari 3.2.2 for Windows Apple Safari 4 Beta Apple Safari 3.2 目前没有解决方案提供： http://www.apple.com/ Author : Ahmed Obied...