886 matches found
CVE-2008-1088
Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."...
Mandrake Linux Security Advisory : e2fsprogs (MDKSA-2007:242)
Rafal Wojtczuk of McAfee AVERT Research found that e2fsprogs contained multiple integer overflows in memory allocations, based on sizes taken directly from filesystem information. These flaws could result in heap-based overflows potentially allowing for the execution of arbitrary code. The update...
DSA-1422-1 e2fsprogs - arbitrary code execution
Bulletin has no description...
GLSA-200711-15 : FLAC: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200711-15 FLAC: Buffer overflow Sean de Regge reported multiple integer overflows when processing FLAC media files that could lead to improper memory allocations resulting in heap-based buffer overflows. Impact : A remote attacker...
Ubuntu 5.10 / 6.06 LTS / 6.10 : enigmail vulnerability (USN-427-1)
Mikhail Markin reported that enigmail incorrectly handled memory allocations for certain large encrypted attachments. This caused Thunderbird to crash and thus caused the entire message to be inaccessible. Note that Tenable Network Security has extracted the preceding description block directly...
CVE-2005-0003
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA virtual memory address allocations, which allows local users to cause a denial of service system crash or execute arbitrary code via a crafted ELF or a.out file...