9866 matches found
GLSA-200703-26 : file: Integer underflow
The remote host is affected by the vulnerability described in GLSA-200703-26 file: Integer underflow Jean-Sebastien Guay-Leroux reported an integer underflow in fileprintf function. Impact : A remote attacker could entice a user to run the 'file' program on a specially crafted file that would...
[SECURITY] [DSA 1274-1] New file packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1274-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : file Vulnerability :...
DSA-1274-1 file - buffer overflow
Bulletin has no description...
file: Integer underflow
Background file is a utility that guesses a file format by scanning binary data for patterns. Description Jean-Sebastien Guay-Leroux reported an integer underflow in fileprintf function. Impact A remote attacker could entice a user to run the "file" program on a specially crafted file that would...
PHP 5.2.0 header() Space Trimming Buffer Underflow Exploit (MacOSX)
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || // // | |/ || '|/ |/ -| ' / -/ |||| /| || / //...
RHEL 4 / 5 : file (RHSA-2007:0124)
An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...
Mandrake Linux Security Advisory : file (MDKSA-2007:067)
Jean-Sebastien Guay-Leroux discovered an integer underflow in the fileprintf function in file prior to 4.20 that allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow. Updated packages have been patched to address this issue. %NASLMINLEVEL...
CentOS 4 : file (CESA-2007:0124)
An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...
XMMS皮肤整数溢出和下溢漏洞
XMMS是一款开放源代码的多媒体播放程序。 XMMS处理皮肤文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 1，是处理皮肤bitmap图象时存在一个整数下溢问题，包含畸形头数据的皮肤图象可导致缓冲区溢出。 2，在处理皮肤bitmap图象时存在一个整数溢出问题，包含畸形头数据的皮肤图象可导致内存破坏。 XMMS 1.2.10 目前没有解决方案提供： http://www.xmms.org/...
file security update
CentOS Errata and Security Advisory CESA-2007:0124 An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a...
Moderate: Red Hat Security Advisory: file security update
An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...
file 4.20 fixes a heap overflow in that can result in arbitrary code execution
Integer underflow in the fileprintf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow...
Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities
====================================================================== Secunia Research 21/03/2007 - XMMS Integer Overflow and Underflow Vulnerabilities - ===================================================================== Table of Contents Affected...
MOPB-25-2007:PHP header() Space Trimming Buffer Underflow Vulnerability
Summary Since PHP 5.2.0 there is a new memory manager that allows exploiting of even one byte underflow vulnerabilities like the one described by this advisory. When an all whitespace string is passed to the header function this can result in a buffer underflow that allows code execution on atlea...
CVE-2007-1584
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string...
CVE-2007-1584
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string...
CVE-2007-1584
CVE-2007-1584 describes a buffer underflow in PHP 5.2.0's header function that allows a context‑dependent attacker to execute arbitrary code by supplying an all‑whitespace string. The vulnerability is triggered when whitespace precedes the string and '�' characters are written due to the underflo...
CVE-2007-1584
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string...
CVE-2007-0654
Integer underflow in X MultiMedia System xmms 1.2.10 allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which results in a stack-based buffer overflow...
Design/Logic Flaw
Integer underflow in X MultiMedia System xmms 1.2.10 allows user-assisted remote attackers to execute arbitrary code via crafted header information in a skin bitmap image, which results in a stack-based buffer overflow...