CVE-2004-2372

Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path. NOTE: some external documents recommend that Bochs be installed...

CVE-2004-2552

Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost command line argument. NOTE: since the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privileg...

MS Windows NetDDE Remote Buffer Overflow Exploit (MS04-031)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows NetDDE Remote Buffer Overflow Exploit MS04-031 =========================================================== / HOD-ms04031-netdde-expl.c: 2004-12-30: PUBLIC v.0.2 Copyrigh...

KLA10302 DoS vulnerability in Eudora

A buffer overflow was found in Eudora. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories Release note Related products Qualcom-Eudora CVE list CVE-2004-2301 warnin...

CVE-2004-1275

Buffer overflow in the removequote function in convert.c for html2hdml 1.0.3 allows remote attackers to execute arbitrary code via a crafted HTML file...

iDEFENSE Security Advisory 12.21.04: Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability

Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=172&type=vulnerabilities December 21, 2004 I. BACKGROUND Xpdf is an open-source viewer for Portable Document Format PDF files. II. DESCRIPTION Remote...

ImageMagick -- PSD handler heap overflow vulnerability

An iDEFENSE Security Advisory reports: Remote exploitation of a buffer overflow vulnerability in The ImageMagick's Project's ImageMagick PSD image-decoding module could allow an attacker to execute arbitrary code. Exploitation may allow attackers to run arbitrary code on a victim's computer if th...

WinRAR buffer overflow

Buffer overflow on file deletion...

curl -- authentication buffer overflow vulnerability

Two iDEFENSE Security Advisories reports: An exploitable stack-based buffer overflow condition exists when using NT Lan Manager NTLM authentication. The problem specifically exists within Curlinputntlm defined in lib/httpntlm.c. Successful exploitation allows remote attackers to execute arbitrary...

Crystal FTP Pro buffer overflow

Buffer overflow on oversized file extension in directory listing...

[SECURITY] [DSA 611-1] New htget packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 611-1 [email protected] http://www.debian.org/security/ Martin Schulze December 20th, 2004 http://www.debian.org/security/faq -...

GLSA-200412-18 : abcm2ps: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200412-18 abcm2ps: Buffer overflow vulnerability Limin Wang has located a buffer overflow inside the putwords function in the abcm2ps code. Impact : A remote attacker could convince the victim to download a specially crafted ABC...

NASM: Buffer overflow vulnerability

Background NASM is a 80x86 assembler that has been created for portability and modularity. NASM supports Pentium, P6, SSE MMX, and 3DNow extensions. It also supports a wide range of objects formats ELF, a.out, COFF, ..., and has its own disassembler. Description Jonathan Rockway discovered that...

Hitachi Cosminexus Web Contents Generator buffer overflow

No description provided...

[SA13518] Cosminexus Web Contents Generator Buffer Overflow Vulnerability

TITLE: Cosminexus Web Contents Generator Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13518 VERIFY ADVISORY: http://secunia.com/advisories/13518/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Cosminexus Server 4.x http://secunia.com/product/4393/...

RHEL 2.1 / 3 : zip (RHSA-2004:634)

An updated zip package that fixes a buffer overflow vulnerability is now available. The zip program is an archiving utility which can create ZIP-compatible archives. A buffer overflow bug has been discovered in zip when handling long file names. An attacker could create a specially crafted path...

O3Read 0.0.3 - HTML Parser Buffer Overflow

source: https://www.securityfocus.com/bid/12000/info o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is possible that files may originate from an...

iDEFENSE Security Advisory 12.16.04: Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability

Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=169 December 16, 2004 I. BACKGROUND Backup Exec is a next generation backup and restore solution for Microsoft Windows server...

DXFScope 0.2 - Remote Client-Side Buffer Overflow

DXFScope 0.2 - Remote Client-Side Buffer Overflow source: https://www.securityfocus.com/bid/11986/info A remote, client-side buffer overflow vulnerability reportedly affects the DXFscope utility. This issue is due to a failure of the application to properly sanitize user-supplied input prior to...

DXFScope 0.2 - Remote Client-Side Buffer Overflow

source: https://www.securityfocus.com/bid/11986/info A remote, client-side buffer overflow vulnerability reportedly affects the DXFscope utility. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it as the format specifier string in a...