Iconics GENESIS32 Integer Overflow Version 9.21.201.01

The GenBroker service on port 38080 is affected by three integer overflow vulnerabilities while handling opcode 0x4b0, which is caused by abusing the the memory allocations needed for the number of elements passed by the client. This results unexpected behaviors such as direct registry calls,...

Pango library NULL pointer dereference

Memory allocations are not controlled...

Ubuntu 10.04 LTS / 10.10 : linux, linux-ec2 vulnerabilities (USN-1054-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Rosenberg discovered that the Linux kernel TIPC implementation...

SuSE 10 Security Update : amarok (ZYPP Patch Number 5931)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135 / CVE-2009-0136 %NASLMINLEVEL 70300 ...

Ubuntu Update for cups, cupsys vulnerabilities USN-952-1

Ubuntu Update for Linux kernel vulnerabilities USN-952-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9521.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for cups, cupsys vulnerabilities USN-952-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : cups, cupsys vulnerabilities (USN-952-1)

Adrian Pastor and Tim Starling discovered that the CUPS web interface incorrectly protected against cross-site request forgery CSRF attacks. If an authenticated user were tricked into visiting a malicious website while logged into CUPS, a remote attacker could modify the CUPS configuration and...

Microsoft Office Project Remote Code Execution Vulnerability (967183)

This host is missing a critical security update according to Microsoft Bulletin MS09-074. OpenVAS Vulnerability Test $Id: secpodms09-074.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Office Project Remote Code Execution Vulnerability 967183 Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod...

apr security update

CentOS Errata and Security Advisory CESA-2009:1204 Updated apr and apr-util packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache Portable...

openSUSE Security Update : amarok (amarok-436)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

Ubuntu Update for enigmail vulnerability USN-427-1

Ubuntu Update for Linux kernel vulnerabilities USN-427-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4271.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for enigmail vulnerability USN-427-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libxml2 vulnerabilities USN-673-1

Ubuntu Update for Linux kernel vulnerabilities USN-673-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6731.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxml2 vulnerabilities USN-673-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

openSUSE 10 Security Update : amarok (amarok-5932)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

USN-673-1: libxml2 vulnerabilities

Drew Yao discovered that libxml2 did not correctly handle certain corrupt XML documents. If a user or automated system were tricked into processing a malicious XML document, a remote attacker could cause applications linked against libxml2 to enter an infinite loop, leading to a denial of service...

Input validation

Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."...

CVE-2008-1088

Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of "memory resource allocations."...

Mandrake Linux Security Advisory : e2fsprogs (MDKSA-2007:242)

Rafal Wojtczuk of McAfee AVERT Research found that e2fsprogs contained multiple integer overflows in memory allocations, based on sizes taken directly from filesystem information. These flaws could result in heap-based overflows potentially allowing for the execution of arbitrary code. The update...

DSA-1422-1 e2fsprogs - arbitrary code execution

Bulletin has no description...

GLSA-200711-15 : FLAC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200711-15 FLAC: Buffer overflow Sean de Regge reported multiple integer overflows when processing FLAC media files that could lead to improper memory allocations resulting in heap-based buffer overflows. Impact : A remote attacker...

Ubuntu 5.10 / 6.06 LTS / 6.10 : enigmail vulnerability (USN-427-1)

Mikhail Markin reported that enigmail incorrectly handled memory allocations for certain large encrypted attachments. This caused Thunderbird to crash and thus caused the entire message to be inaccessible. Note that Tenable Network Security has extracted the preceding description block directly...

CVE-2005-0003

The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA virtual memory address allocations, which allows local users to cause a denial of service system crash or execute arbitrary code via a crafted ELF or a.out file...