QuickTime < 7.4.1 RTSP Response Long Reason-Phrase Arbitrary Remote Code Execution (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.4.1. Such versions contain a heap-based buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled. If an attacker can trick a user into visiting a specially crafted webpage, arbitrar...

Cisco Unified Communications Manager CTL Provider Heap Overflow (CVE-2008-0027)

Cisco Unified Communications Manager provides voice, video, mobility, and presence services. The Cisco Certificate Trust List CTL Provider service handles authentication and certificate requests for the Cisco Unified Communications Manager. A buffer overflow vulnerability exists in the Certificat...

Debian Security Advisory DSA 186-1 (log2mail)

The remote host is missing an update to log2mail announced via advisory DSA 186-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6613

Stack-based buffer overflow in the printiso9660recurse function in iso-info src/iso-info.c in GNU Compact Disc Input and Control Library libcdio 0.79 and earlier allows context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image that...

White_Dune 0.29beta791 - Multiple Local Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/27102/info WhiteDune is affected by a format-string vulnerability and a buffer-overflow vulnerability. Exploiting these issues can allow local attackers to execute arbitrary code in the context of the application. Versions prior to WhiteDune 0.29beta795 a...

CoolPlayer 2.17 - CPLI_ReadTag_OGG() Buffer Overflow

CoolPlayer 2.17 - CPLIReadTagOGG Buffer Overflow source: https://www.securityfocus.com/bid/27061/info CoolPlayer is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue occurs when handling specially crafted OGG...

Zoom Player 3.3056 - .ZPL Error Message Arbitrary Code Execution

Zoom Player 3.3056 - .ZPL Error Message Arbitrary Code Execution source: https://www.securityfocus.com/bid/27007/info Zoom Player is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected...

CVE-2007-6386

Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008 allows user-assisted remote attackers to cause a denial of service SfCtlCom.exe crash, and allows local users to gain privileges, via...

DTSA-100-1 samba - buffer overflow

Bulletin has no description...

Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/26604/info Autonomy KeyView is prone to multiple buffer-overflow vulnerabilities. Successfully exploiting these issues could allow an attacker to execute arbitrary code in the context of the user running the application. Multiple applications incorporate...

CVE-2007-6112

Buffer overflow in the PPP dissector Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

Description Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. Remote attackers can exploit this issue to execute arbitrary machine code in the context of a user running the application. Successful exploits will...

openSUSE 10 Security Update : cups (cups-4598)

A missing length check in the IPP implementation of cups could lead to a buffer overflow. Attackers could exploit that to potentially execute arbitrary code with root privileges CVE-2007-4351. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Tivoli Storage Manager CAD Host header buffer overflow

Added: 10/26/2007 CVE: CVE-2007-4880 BID: 25743 OSVDB: 38161 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on port 1581/TCP. Problem A buffer overflow vulnerability in Tivoli Storage...

Eggdrop Server Module Message Handling Remote BoF Exploit

No description provided by source. / Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability http://www.securityfocus.com/bid/24070 discovered by Bow Sineath tested on eggdrop 1.6.18 / linux 2.4 -exploit is a fake ircd...

EUVD-2007-5225

Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via 1 a long service attach request on TCP port 3050 to the SVCattach function or 2 unspecified vectors involving the INETconnect...

Trend Micro ServerProtect TMregChange buffer overflow

Added: 09/27/2007 CVE: CVE-2007-4731 OSVDB: 45878 Background Trend Micro ServerProtect is a virus scanner for servers. Problem A buffer overflow vulnerability in the TMregChange function in the TMreg.dll library allows remote attackers to execute arbitrary commands by sending specially crafted da...

lighttpd mod_fastcgi HTTP Request Header Remote Overflow

The remote web server appears to be lighttpd running with the FastCGI module modfastcgi. The version of the FastCGI module on the remote host is affected by a buffer overflow vulnerability. A remote attacker can exploit this, by sending a specially crafted request with a long header, to add or...

CVE-2007-4730

Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap...

Storm 2 mps. the dll component multiple buffer overflow vulnerabilities-vulnerability warning-the black bar safety net

Online burst a storm of the activex vulnerability, the call is rawParse this method, so simple to see, found the problem quite a bit. These issues are able to control eip or seh, that is each vulnerability can lead to arbitrary code execution. Affected versions: storm 2other not tested Unaffected...