4579 matches found
CVE-2011-3026: Integer Overflow or Wraparound
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation...
PHP 5.x < 5.2.2 Multiple vulnerabilities
According to its banner, the version of PHP 5.x installed on the remote host is older than 5.2.2. It is, therefore, affected by multiple vulnerabilities: - A heap-based buffer overflow vulnerability was found in PHP's gd extension. A script that could be forced to process WBMP images from an...
ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-11-354 December 22, 2011 - -- CVE ID: CVE-2011-4168 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...
HP Managed Printing Administration jobDelivery Multiple Vulnerabilities
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Managed Printing Administration. Authentication is not required to exploit this vulnerability. There multiple classes of flaws within this product including arbitrary file creation, null char...
HP Managed Printing Administration jobAcct Multiple Vulnerabilities
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Managed Printing Administration. Authentication is not required to exploit this vulnerability. There multiple classes of flaws within this product including arbitrary file creation, null char...
GLSA-201111-07 : TinTin++: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201111-07 TinTin++: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TinTin++. Please review the CVE identifiers referenced below for details. Impact : Remote unauthenticated attackers may be able to execu...
TinTin++: Multiple vulnerabilities
Background TinTin++ is a free MUD gaming client. Description Multiple vulnerabilities have been discovered in TinTin++. Please review the CVE identifiers referenced below for details. Impact Remote unauthenticated attackers may be able to execute arbitrary code with the privileges of the TinTin++...
Upload vulnerability filepath variable\0 0 truncation-vulnerabilities and early warning-the black bar safety net
POST /coin/upload. asp? action=upfile HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd. ms-excel, application/vnd. ms-powerpoint, application/msword, / Referer: Recently phpwind contains a vulnerability that Diamondback always...
Application to the ASP file upload vulnerability 0×0 0 truncation attack-vulnerability warning-the black bar safety net
k ingbase 2011/8/1 Chinese simple narrative This article translated from: 0×0 0 vs ASP file uploads, the original author is: Brett Moore Security-Assessment. com company, this article is written to 0 in 4 years, the original is here: http://...
Heap overflow
Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALENDAR attachment in an e-mail message, related to a...
PT-2011-2276
Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 8.0 before HP3 Description The issue is related to a heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll, which can be exploited by remote attackers to execute arbitrary code. This...
Secunia Research: Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability
====================================================================== Secunia Research 27/09/2011 - Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability - ====================================================================== Table of Contents Affected...
nginx 0.8.37 空字节截断导致任意代码执行漏洞
No description provided by source...
CentOS Update for php CESA-2010:0919 centos5 i386
Check for the Version of php OpenVAS Vulnerability Test CentOS Update for php CESA-2010:0919 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
ruby: memory corruption in BigDecimal on 64bit platforms
The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...
ruby: memory corruption in BigDecimal on 64bit platforms
The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...
CVE-2011-2531
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service data truncation by sending a large amount of data...
CVE-2011-2531
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service data truncation by sending a large amount of data...
DEBIAN-CVE-2011-2531
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service data truncation by sending a large amount of data...
CVE-2011-2531
Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an incorrect data type to the value column in certain tables, which might allow remote attackers to cause a denial of service data truncation by sending a large amount of data...