GLSA-200812-02 : enscript: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-02 enscript: User-assisted execution of arbitrary code Two stack-based buffer overflows in the readspecialescape function in src/psgen.c have been reported. Ulf Harnhammar of Secunia Research discovered a vulnerability...

Gentoo Security Advisory GLSA 200812-02 (enscript)

The remote host is missing updates announced in advisory GLSA 200812-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1670-1 (enscript)

The remote host is missing an update to enscript announced via advisory DSA 1670-1. OpenVAS Vulnerability Test $Id: deb16701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1670-1 enscript Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

openSUSE 10 Security Update : jasper (jasper-5771)

Multiple, potentially dangerous integer overflows, buffer overflows and a problem with temporary files have been fixed CVE-2008-3520, CVE-2008-3521, CVE-2008-3522. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Stack overflow

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

CVE-2008-5282

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

CVE-2008-5282

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

CVE-2008-5279

The Local ZIM Server zcs.exe in Zilab Chat and Instant Messaging ZIM Server 2.1 and earlier allow remote attackers to execute arbitrary code via 1 heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and 2 a stack-based buffer overflow with ...

CVE-2008-5279

The CVE-2008-5279 entry concerns the Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier, where remote attackers can trigger arbitrary code execution via (1) heap-based buffer overflows from long room names or source accounts, and (2) a stack-based overflow...

Heap overflow

xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...

CVE-2008-5239

xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

CVE-2008-5246

Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the 1 id3v22interpframe and 2 id3v24interpframe functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

CVE-2008-5246

Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vectors that send ID3 data to the 1 id3v22interpframe and 2 id3v24interpframe functions in src/demuxers/id3.c. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-5239

CVE-2008-5239 affects xine-lib up to version 1.1.12 (and 1.1.15 and earlier). The issue occurs in unspecified read calls in input_file.c, input_net.c, input_smb.c, and input_http.c when handling negative and zero values, enabling a remote attacker to trigger out-of-bounds reads and heap-based ove...

CVE-2008-5246

CVE-2008-5246 affects xine-lib prior to 1.1.15, with multiple heap-based buffer overflows in ID3 parsing (id3v22_interp_frame/id3v24_interp_frame) that could enable remote code execution. The connected advisories corroborate related overflow issues across variants and note remediation by upgradin...

CVE-2008-2431

Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calling the Novell iPrint ActiveX control aka ienipp.ocx with 1 a long third argument to the GetDriverFile method; a long first argument to the 2 GetPrinterURLList or 3...

CVE-2008-4829

Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via 1 a long "Zwitterion v" HTTP header, related to the httpparsescheader function; 2 a crafted pls playlist with a long entry, related to the httpgetpls function; or 3 a crafted m3u...