Buffer overflow

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...

CVE-2008-5722

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...

Imlib2: User-assisted execution of arbitrary code

Background Imlib2 is replacement library from the Enlightenment project for libraries like libXpm. Description Julien Danjou reported a pointer arithmetic error and a heap-based buffer overflow within the load function of the XPM image loader. Impact A remote attacker could entice a user to proce...

CVE-2008-5680

Multiple buffer overflows in Opera before 9.63 might allow 1 remote attackers to execute arbitrary code via a crafted text area, or allow 2 user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178...

CVE-2008-4234

Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application association for the file, which does not trigger a...

CVE-2008-4234

CVE-2008-4234 affects Mac OS X 10.5.x (CoreTypes). An incomplete blacklist in the Quarantine/Download Validation allowed a file with executable content type and no application association to bypass warnings, potentially enabling arbitrary code execution. Affected: Mac OS X 10.5 to 10.5.5; Server ...

CVE-2008-4234

Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application association for the file, which does not trigger a...

GLSA-200812-18 : JasPer: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-18 JasPer: User-assisted execution of arbitrary code Marc Espie and Christian Weisgerber have discovered multiple vulnerabilities in JasPer: Multiple integer overflows might allow for insufficient memory allocation, leading...

GLSA-200812-15 : POV-Ray: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-15 POV-Ray: User-assisted execution of arbitrary code POV-Ray uses a statically linked copy of libpng to view and output PNG files. The version shipped with POV-Ray is vulnerable to CVE-2008-3964, CVE-2008-1382,...

[ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200812-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200812-01 : OptiPNG: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-01 OptiPNG: User-assisted execution of arbitrary code A buffer overflow in the BMP reader in OptiPNG has been reported. Impact : A remote attacker could entice a user to process a specially crafted BMP image, possibly...

Gentoo Security Advisory GLSA 200812-01 (optipng)

The remote host is missing updates announced in advisory GLSA 200812-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200812-02 : enscript: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-02 enscript: User-assisted execution of arbitrary code Two stack-based buffer overflows in the readspecialescape function in src/psgen.c have been reported. Ulf Harnhammar of Secunia Research discovered a vulnerability...

GLSA-200812-05 : libsamplerate: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-05 libsamplerate: User-assisted execution of arbitrary code Russell O'Connor reported a buffer overflow in src/srcsinc.c related to low conversion ratios. Impact : A remote attacker could entice a user or automated system t...

Gentoo Security Advisory GLSA 200811-04 (graphviz)

The remote host is missing updates announced in advisory GLSA 200811-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200811-03 (faad2)

The remote host is missing updates announced in advisory GLSA 200811-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200811-04 (graphviz)

The remote host is missing updates announced in advisory GLSA 200811-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer overflow

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5015

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has...

CVE-2008-5015

Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in the same tab from a chrome or privileged about: page, which makes it easier for user-assisted attackers to execute arbitrary JavaScript with chrome privileges via malicious code in a file that has...