AST-2007-022: Buffer overflows in voicemail when using IMAP storage

Asterisk Project Security Advisory - AST-2007-022 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Buffer overflows in voicemail when using IMAP | | | storage |...

Asterisk malformed MIME boundary multiple buffer overflows and DoS

Multiple buffer overflows and crash on malformed MIME boundary if IMAP storage is used for Voicemail...

sip-pwn.txt

SIP, the IETF endorsed VoIP signaling protocol, is currently used to establish and manage VoIP calls. Many security issues have been addressed until know about the security of VoIP due to the large numbers of attacks coming from the traditional IP networks, but none have addressed the securing th...

CVE-2007-4466

Multiple stack-based buffer overflows in Electronic Arts EA SnoopyCtrl ActiveX control NPSnpy.dll allow remote attackers to execute arbitrary code via unspecified methods and parameters...

Stack overflow

Multiple stack-based buffer overflows in Electronic Arts EA SnoopyCtrl ActiveX control NPSnpy.dll allow remote attackers to execute arbitrary code via unspecified methods and parameters...

CVE-2007-4466

Multiple stack-based buffer overflows in Electronic Arts EA SnoopyCtrl ActiveX control NPSnpy.dll allow remote attackers to execute arbitrary code via unspecified methods and parameters...

CVE-2007-5263

Multiple buffer overflows in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via 1 a crafted "0x5c" packet or 2 many 32-bit numbers in a "0x18" packet, or cause a denial of service crash via 3 a large "0x4b" packet...

Electronic Arts SnoopyCtrl ActiveX control and plug-in stack buffer overflows

Overview The Electronic Arts SnoopyCtrl ActiveX control and plug-in contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Electronic Arts EA.com provides an ActiveX control and Netscape-style...

PHP: Multiple vulnerabilities

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description Several vulnerabilities were found in PHP. Mattias Bengtsson and Philip Olausson reported integer overflows in the gdImageCreate and...

CVE-2004-2707

Multiple unspecified vulnerabilities in Gyach Enhanced Gyach-E before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses...

CVE-2005-4870

CVE-2005-4870 describes stack-based buffer overflows in IBM DB2 8.1 affecting four XML-related functions (xmlvarcharfromfile, xmlclobfromfile, xmlfilefromvarchar, xmlfilefromclob). The overflow is triggered by a 94-byte second argument, leading to overwriting the return address to a pointer withi...

CVE-2005-4870

Stack-based buffer overflows in the 1 xmlvarcharfromfile, 2 xmlclobfromfile, 3 xmlfilefromvarchar, and 4 xmlfilefromclob function calls in IBM DB2 8.1 allow remote attackers to execute arbitrary code via a 94-byte second argument, which causes the return address to be overwritten with a pointer t...

CVE-2004-2710

CVE-2004-2710 affects Gyach Enhanced (Gyach-E) prior to 1.0.3. Multiple buffer overflows allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary code via two vectors: (1) sending certain typing statuses, and (2) setting the chat room status bar to the current c...

CVE-2004-2711

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "avatar retrieval."...

CVE-2004-2710

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 sending certain typing statuses or 2 setting the chat room status bar to the current chat room name...

CVE-2004-2707

Technical details about CVE-2004-2707 are not provided in the supplied documents; no specifics on affected versions, impact, or exploitation are available here. Monitor for updates.

CVE-2007-5256

Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow 1 remote attackers to execute arbitrary code via a long HELP command on TCP port 3010 to the sysuser::exechelp function in sysuser.cc and 2 remote authenticated users to execute arbitrary...

Stack overflow

Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via 1 a long attach request on TCP port 3050 to the iscattachdatabase function or 2 a long create request on TCP port 3050 to the...

CVE-2007-5249

Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allow remote attackers to cause a denial of service daemon crash via a long 1 PBY packet to the YPG server on UDP...

CVE-2007-5243

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via 1 a long service attach request on TCP port 3050 to the a SVCattach or b INETconnect function, 2 a long create request...