517 matches found
Mandriva Linux Security Advisory : ntp (MDVSA-2009:309)
Multiple vulnerabilities has been found and corrected in ntp : Requesting peer information from a malicious remote time server may lead to an unexpected application termination or arbitrary code execution CVE-2009-0159. A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authenticati...
Multiple Vendor Telnet Client env_opt_add Buffer Overflow (CVE-2005-0468)
The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...
Apple Mac OS X iChat AIM URL Format String (CVE-2007-0021)
Apple Computer Mac OS X is the operating system shipped with Apple Macintosh computers. The product bundles numerous Internet applications such as web browser, email client, instant messenger, etc. Apple iChat is a multi-protocol instant messaging application that supports AIM and Jabber services...
Apple QuickTime Multiple Vulnerabilities (Jun 2009)
Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...
Preemptive Protection against Adobe Reader JavaScript getAnnots Method Memory Corruption Vulnerability
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file. Portable Document Format PDF is an open file format created by Adobe Systems. It is...
Firefox XSL Parsing Vulnerability (Windows)
The host is installed with Mozilla Firefox browser and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxxslparsingvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Firefox XSL Parsing Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone...
Mozilla Seamonkey < 1.1.16 XSL Parsing Vulnerability - Windows
Mozilla Seamonkey is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Firefox XSL Parsing Vulnerability (mfsa2009-12) - Linux
Mozilla Firefox browser is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Seamonkey XSL Parsing Vulnerability (Linux)
The host is installed with Mozilla Seamnkey and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbseamonkeyxslparsingvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey XSL Parsing Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbo...
Integer overflow
Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service stack corruption and application termination via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka t...
CVE-2009-1217
The CVE-2009-1217 issue affects Microsoft GDI+ (gdiplus.dll) on Windows XP, where the GPFont::SetData function can overflow when parsing an EMF file, leading to a denial of service via stack corruption. All sources consistently describe an off-by-one/integer overflow condition triggered by specia...
CVE-2009-0020
Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted resource fork that triggers memory corruption...
Apple Safari Malformed URI Remote DoS Vulnerability (Windows)
This host is installed with Apple Safari web browser and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafarihttpuridosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Malformed URI Remote DoS Vulnerability Windows Authors: Chandan S Copyright:...
About the security content of Security Update 2008-008 / Mac OS X v10.5.6
About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Last Modified: December 15, 2008 Article: HT3338 Summary This document describes the security content of Security Update 2008-008 / Mac OS X v10.5.6, which can be downloaded and installed via Software Update preferences, or...
Apple QuickTime heap buffer overflow vulnerability
Overview Apple QuickTime contains a buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute code. Description Apple QuickTime is a media player that includes a browser plugin. Color table atoms can set a list of preferred colors for displaying movieson...
GLSA-200711-08 : libpng: Multiple Denials of Service
The remote host is affected by the vulnerability described in GLSA-200711-08 libpng: Multiple Denials of Service An off-by-one error when handling ICC profile chunks in the pngsetiCCP function was discovered CVE-2007-5266. George Cook and Jeff Phillips reported several errors in pngrtran.c, the u...