CVE-2010-2571

CVE-2010-2571 is a memory corruption vulnerability in Microsoft Publisher 2002 SP3 and Microsoft Publisher 2003 SP3 caused by an array indexing error in the pubconv.dll (Publisher Converter DLL) when processing malformed Publisher 97 files. It enables remote code execution if a user opens a craft...

CVE-2010-4384

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header...

Design/Logic Flaw

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header...

CVE-2010-4384

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header...

Security fix for the ALT Linux 5 package cvs version 1.11.23-alt4

Dec. 3, 2010 Dmitry V. Levin 1.11.23-alt4 - Applied upstream fix to an array index error, leading to a heap-based buffer overflow, found in the way CVS applied certain delta fragment changes from input files in the RCS Revision Control System file format. If an attacker in control of a CVS...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 3 Extended Life Cycle Support ELS. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores...

Code injection

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

CVE-2010-4206

Removed by vendor...

CVE-2010-4206

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...

CVE-2010-3846

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

CVE-2010-3846

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

Heap overflow

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

CVE-2010-3846

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

CVE-2010-3846

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

CVE-2010-3846

Summary of CVE-2010-3846 and CVS 1.11.23 : The issue is an array index error in the apply_rcs_change function (rcs.c) that can trigger a heap-based buffer overflow in CVS 1.11.23. This creates a condition for local users to gain privileges when processing delta fragments in RCS files. The vulnera...

CVE-2010-3846

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

PT-2010-5116 · Concurrent Versions System +1 · Cvs +1

Name of the Vulnerable Software and Affected Versions: CVS version 1.11.23 Description: The issue is related to an array index error in the apply rcs change function, located in the rcs.c file. This error can be exploited by local users to gain privileges through a specially crafted RCS file that...

CentOS Update for gpdf CESA-2010:0752 centos4 i386

Check for the Version of gpdf OpenVAS Vulnerability Test CentOS Update for gpdf CESA-2010:0752 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for xpdf CESA-2010:0751 centos4 i386

Check for the Version of xpdf OpenVAS Vulnerability Test CentOS Update for xpdf CESA-2010:0751 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for gpdf CESA-2010:0752 centos4 i386

Check for the Version of gpdf OpenVAS Vulnerability Test CentOS Update for gpdf CESA-2010:0752 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...