1073 matches found
sdl_image -- buffer overflow vulnerabilities
Secunia reports: Two vulnerabilities have been reported in SDLimage, which can be exploited by malicious people to cause a Denial of Service or potentially compromise an application using the library. A boundary error within the LWZReadByte function in IMGgif.c can be exploited to trigger the...
libcdio: User-assisted execution of arbitrary code
Background libcdio is a library for accessing CD-ROM and CD images. Description Devon Miller reported a boundary error in the "printiso9660recurse" function in files cd-info.c and iso-info.c when processing long filenames within Joliet images. Impact A remote attacker could entice a user to open ...
Debian Security Advisory DSA 593-1 (imagemagick)
The remote host is missing an update to imagemagick announced via advisory DSA 593-1. OpenVAS Vulnerability Test $Id: deb5931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 593-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 593-1 (imagemagick)
The remote host is missing an update to imagemagick announced via advisory DSA 593-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Security fix for the ALT Linux 5 package samba version 3.0.28-alt1
Dec. 10, 2007 Alexander Bokovoy 3.0.28-alt1 - Fixed: + CVE-2007-6015: == Specifically crafted GETDC mailslot requests == can trigger a boundary error in the domain == controller GETDC mail slot support which == can be remotely exploited to execute arbitrary == code. + fix error path in local...
Samba < 3.0.28 'send_mailslot' Function Buffer Overflow
Binary data 4311.prm...
Samba < 3.0.28 send_mailslot Function Remote Buffer Overflow
According to its banner, the version of the Samba server on the remote host is reportedly affected by a boundary error in 'nmbd' within the 'sendmailslot' function. Provided the 'domain logons' option is enabled in 'smb.conf', an attacker can leverage this issue to produce a stack-based buffer...
GLSA-200711-22 : Poppler, KDE: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200711-22 Poppler, KDE: User-assisted execution of arbitrary code Alin Rad Pop Secunia Research discovered several vulnerabilities in the 'Stream.cc' file of Xpdf: An integer overflow in the DCTStream::reset method and a boundary...
GLSA-200711-27 : Link Grammar: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200711-27 Link Grammar: User-assisted execution of arbitrary code Alin Rad Pop from Secunia Research discovered a boundary error in the function separatesentence in file tokenize.c when processing an overly long word which might...
Poppler, KDE: User-assisted execution of arbitrary code
Background Poppler is a cross-platform PDF rendering library originally based on Xpdf. KOffice is an integrated office suite for KDE. KWord is the KOffice word processor. KPDF is a KDE-based PDF viewer included in the kdegraphics package. Description Alin Rad Pop Secunia Research discovered sever...
Samba < 3.0.27 Multiple Vulnerabilities
According to its banner, the version of the Samba server on the remote host contains a boundary error in the 'replynetbiospacket' function in 'nmbd/nmbdpackets.c' when sending NetBIOS replies. Provided the server is configured to run as a WINS server, a remote attacker can exploit this issue by...
FreeBSD : xpdf -- multiple remote Stream.CC vulnerabilities (2747fc39-915b-11dc-9239-001c2514716c)
Secunia Research reports : Secunia Research has discovered some vulnerabilities in Xpdf, which can be exploited by malicious people to compromise a user's system. - An array indexing error within the 'DCTStream::readProgressiveDataUnit' method in xpdf/Stream.cc can be exploited to corrupt memory...
Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow
====================================================================== Secunia Research 07/11/2007 - AbiWord Link Grammar "separatesentence" Buffer Overflow - ====================================================================== Table of Contents Affected...
cups boundary error
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service crash via a crafted 1 textWithLanguage or 2 nameWithLanguage Internet Printing Protocol IPP tag, leading to a stack-based buffer overflow...
Sun Java Web Start dnsResolve ActiveX Buffer Overflow (CVE-2007-5019)
Java Technology is a programming platform used for web applications in numerous forms. Java provides a system for developing and deploying cross-platform applications. The vulnerability is due to a boundary error in the Sun Java Web Start ActiveX control that fails to properly handle user supplie...
Mandrake Linux Security Advisory : cups (MDKSA-2007:204-1)
Alin Rad Pop of Secunia Research discovered a vulnerability in CUPS that can be exploited by malicious individuals to execute arbitrary code. This flaw is due to a boundary error when processing IPP Internet Printing Protocol tags. Update : Due to incorrect build requirements/conflicts, the...
RHEL 5 : cups (RHSA-2007:1020)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1020 advisory. - cups boundary error CVE-2007-4351 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...
Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability
====================================================================== Secunia Research 31/10/2007 - CUPS IPP Tags Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...
Ipswitch IMail Client Multipart MIME Email Message Handling Overflow
IMail Client, a tool for administering Ipswitch IMail Server, is installed on the remote Windows host. The version of IMail Client on the remote host contains a boundary error that can be triggered by a long 'boundary' parameter when processing emails with multipart MIME data. If an attacker can...
GLSA-200710-28 : Qt: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200710-28 Qt: Buffer overflow Dirk Mueller from the KDE development team discovered a boundary error in file qutfcodec.cpp when processing Unicode strings. Impact : A remote attacker could send a specially crafted Unicode string t...