1076 matches found
Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow
====================================================================== Secunia Research 08/04/2008 - Adobe Flash Player "Declare Function V7" Heap Overflow - ====================================================================== Table of Contents Affected...
Preemptive Protection against Novell Client nwspool.dll EnumPrinters Function Buffer Overflow Vulnerability
A buffer overflow vulnerability has been discovered in the Novel Client for Windows. The flaw is due to a boundary error in Novell Client's Spooler service nwspool.dll. The vulnerable service is included with the Novell Client for Microsoft Windows, and provides access to remote printing services...
GLSA-200802-01 : SDL_image: Two buffer overflow vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200802-01 SDLimage: Two buffer overflow vulnerabilities The LWZReadByte function in file IMGgif.c and the IMGLoadLBMRW function in file IMGlbm.c each contain a boundary error that can be triggered to cause a static buffer overflow...
sdl_image -- buffer overflow vulnerabilities
Secunia reports: Two vulnerabilities have been reported in SDLimage, which can be exploited by malicious people to cause a Denial of Service or potentially compromise an application using the library. A boundary error within the LWZReadByte function in IMGgif.c can be exploited to trigger the...
libcdio: User-assisted execution of arbitrary code
Background libcdio is a library for accessing CD-ROM and CD images. Description Devon Miller reported a boundary error in the "printiso9660recurse" function in files cd-info.c and iso-info.c when processing long filenames within Joliet images. Impact A remote attacker could entice a user to open ...
Debian Security Advisory DSA 593-1 (imagemagick)
The remote host is missing an update to imagemagick announced via advisory DSA 593-1. OpenVAS Vulnerability Test $Id: deb5931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 593-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 593-1 (imagemagick)
The remote host is missing an update to imagemagick announced via advisory DSA 593-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Security fix for the ALT Linux 5 package samba version 3.0.28-alt1
Dec. 10, 2007 Alexander Bokovoy 3.0.28-alt1 - Fixed: + CVE-2007-6015: == Specifically crafted GETDC mailslot requests == can trigger a boundary error in the domain == controller GETDC mail slot support which == can be remotely exploited to execute arbitrary == code. + fix error path in local...
Samba < 3.0.28 'send_mailslot' Function Buffer Overflow
Binary data 4311.prm...
Samba < 3.0.28 send_mailslot Function Remote Buffer Overflow
According to its banner, the version of the Samba server on the remote host is reportedly affected by a boundary error in 'nmbd' within the 'sendmailslot' function. Provided the 'domain logons' option is enabled in 'smb.conf', an attacker can leverage this issue to produce a stack-based buffer...
GLSA-200711-27 : Link Grammar: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200711-27 Link Grammar: User-assisted execution of arbitrary code Alin Rad Pop from Secunia Research discovered a boundary error in the function separatesentence in file tokenize.c when processing an overly long word which might...
GLSA-200711-22 : Poppler, KDE: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200711-22 Poppler, KDE: User-assisted execution of arbitrary code Alin Rad Pop Secunia Research discovered several vulnerabilities in the 'Stream.cc' file of Xpdf: An integer overflow in the DCTStream::reset method and a boundary...
Poppler, KDE: User-assisted execution of arbitrary code
Background Poppler is a cross-platform PDF rendering library originally based on Xpdf. KOffice is an integrated office suite for KDE. KWord is the KOffice word processor. KPDF is a KDE-based PDF viewer included in the kdegraphics package. Description Alin Rad Pop Secunia Research discovered sever...
Samba < 3.0.27 Multiple Vulnerabilities
According to its banner, the version of the Samba server on the remote host contains a boundary error in the 'replynetbiospacket' function in 'nmbd/nmbdpackets.c' when sending NetBIOS replies. Provided the server is configured to run as a WINS server, a remote attacker can exploit this issue by...
FreeBSD : xpdf -- multiple remote Stream.CC vulnerabilities (2747fc39-915b-11dc-9239-001c2514716c)
Secunia Research reports : Secunia Research has discovered some vulnerabilities in Xpdf, which can be exploited by malicious people to compromise a user's system. - An array indexing error within the 'DCTStream::readProgressiveDataUnit' method in xpdf/Stream.cc can be exploited to corrupt memory...
Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow
====================================================================== Secunia Research 07/11/2007 - AbiWord Link Grammar "separatesentence" Buffer Overflow - ====================================================================== Table of Contents Affected...
cups boundary error
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service crash via a crafted 1 textWithLanguage or 2 nameWithLanguage Internet Printing Protocol IPP tag, leading to a stack-based buffer overflow...
Sun Java Web Start dnsResolve ActiveX Buffer Overflow (CVE-2007-5019)
Java Technology is a programming platform used for web applications in numerous forms. Java provides a system for developing and deploying cross-platform applications. The vulnerability is due to a boundary error in the Sun Java Web Start ActiveX control that fails to properly handle user supplie...
Mandrake Linux Security Advisory : cups (MDKSA-2007:204-1)
Alin Rad Pop of Secunia Research discovered a vulnerability in CUPS that can be exploited by malicious individuals to execute arbitrary code. This flaw is due to a boundary error when processing IPP Internet Printing Protocol tags. Update : Due to incorrect build requirements/conflicts, the...
RHEL 5 : cups (RHSA-2007:1020)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1020 advisory. - cups boundary error CVE-2007-4351 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...