Ubuntu 5.10 / 6.06 LTS / 6.10 : php5 vulnerabilities (USN-424-1)

Multiple buffer overflows have been discovered in various PHP modules. If a PHP application processes untrusted data with functions of the session or zip module, or various string functions, a remote attacker could exploit this to execute arbitrary code with the privileges of the web server...

Ubuntu 6.06 LTS / 6.10 : libmodplug vulnerability (USN-521-1)

Luigi Auriemma discovered that libmodplug did not properly sanitize its input. A specially crafted AMF file could be used to exploit this situation to cause buffer overflows and possibly execute arbitrary code as the user. Note that Tenable Network Security has extracted the preceding description...

Ubuntu 5.04 / 5.10 / 6.06 LTS : libtunepimp vulnerability (USN-318-1)

Kevin Kofler discovered several buffer overflows in the tag parser. By tricking a user into opening a specially crafted tagged multimedia file such as .ogg or .mp3 music with an application that uses libtunepimp, this could be exploited to execute arbitrary code with the user's privileges. This...

Ubuntu 5.04 / 5.10 / 6.06 LTS : imagemagick vulnerabilities (USN-340-1)

Tavis Ormandy discovered several buffer overflows in imagemagick's Sun Raster and XCF Gimp image decoders. By tricking a user or automated system into processing a specially crafted image, this could be exploited to execute arbitrary code with the users' privileges. Note that Tenable Network...

Ubuntu 5.04 / 5.10 / 6.06 LTS : libmms, xine-lib vulnerabilities (USN-315-1)

Matthias Hopf discovered several buffer overflows in libmms. By tricking a user into opening a specially crafted remote multimedia stream with an application using libmms, a remote attacker could exploit this to execute arbitrary code with the user's privileges. The Xine library contains an...

Ubuntu 6.06 LTS / 6.10 / 7.04 : tk8.3, tk8.4 vulnerability (USN-529-1)

It was discovered that Tk could be made to overrun a buffer when loading certain images. If a user were tricked into opening a specially crafted GIF image, remote attackers could cause a denial of service or execute arbitrary code with user privileges. Note that Tenable Network Security has...

CVE-2007-5904

Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function...

CVE-2007-5904

Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function...

GLSA-200711-11 : Nagios Plugins: Two buffer overflows

The remote host is affected by the vulnerability described in GLSA-200711-11 Nagios Plugins: Two buffer overflows fabiodds reported a boundary checking error in the 'checksnmp' plugin when processing SNMP 'GET' replies that could lead to a stack-based buffer overflow CVE-2007-5623. Nobuhiro Ban...

php -- multiple security vulnerabilities

PHP project reports: Security Enhancements and Fixes in PHP 5.2.5: Fixed dl to only accept filenames. Reported by Laurent Gaffie. Fixed dl to limit argument size to MAXPATHLEN CVE-2007-4887. Reported by Laurent Gaffie. Fixed htmlentities/htmlspecialchars not to accept partial multibyte sequences...

PCRE and perl regular expression handling multiple security vulnerabilities

Buffer overflows and memory corruptions on different regexps...

Fedora 7 : centericq-4.21.0-13.fc7 (2007-1160)

Thu Jul 19 2007 Andreas Bierfert - 4.21.0-13 - fix CVE-2007-3713 multiple buffer overflows 247979 with help from Lubomir Kundrak - Sun Jun 3 2007 Andreas Bierfert - fix 242344 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

SonicWALL SSL VPN Client Remote ActiveX Multiple Vulnerabilities

Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long 1 serverAddress, 2 sessionId, 3 clientIPLower, 4 clientIPHigher, 5 userName, 6 domainName, or 7...

CVE-2007-5814

Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long 1 serverAddress, 2 sessionId, 3 clientIPLower, 4 clientIPHigher, 5 userName, 6 domainName, or 7...

CVE-2007-4513

Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via a long argument to the 1 "-p" option to lqueryvg or 2 the "-V" option to lquerypv...

SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client

SEC Consult Security Advisory 20071101-0 ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program:...

Multiple image viewers multiple security vulnerabilities

Multiple buffer overflows on BPM, TIFF, XPM, CLP, PSP, RAS, IFF, PNG images parsing...

Verity KeyView SDK / Lotus Notes multiple buffer overflows

Buffer overflows on parsing .mif, .aw, .rtf, .exe, .dll, .ag, .doc...

Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows

====================================================================== Secunia Research 02/11/2007 - ACDSee Products Image and Archive Plug-ins Buffer Overflows - ====================================================================== Table of Contents Affected...

CVE-2002-2368

Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to 1 the GetString function in proxy.c for the SOCKS5 module or 2 the HandleS4Connection function in proxy.c for the SOCKS4 modul...