CVE-2007-2116

Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors, aka DB10. NOTE: as of 20070424, Oracle has not disputed claims that these are buffer overflows in kkzi.o for the SYS.DBMSSNAPINTERNAL package...

INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows

INFIGO IS Security Advisory ADV-2007-04-01 http://www.infigo.hr/ Title: Enterprise Security Analyzer server remote buffer overflows Advisory ID: INFIGO-2007-08 Date: 2007-04-05 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2006-08-04 Impact: Remote code execution preauth Risk...

CVE-2007-1559

Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via 1 unspecified long property values to SonicMediaPlayer.dll or 2 long arguments to unspecified methods in SonicMediaPlayer.dll...

CVE-2007-1559

Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via 1 unspecified long property values to SonicMediaPlayer.dll or 2 long arguments to unspecified methods in SonicMediaPlayer.dll...

CVE-2007-1559

CVE-2007-1559 affects Roxio CinePlayer 3.2, involving stack-based buffer overflows in SonicMediaPlayer.dll (and related SonicDVDDashVRNav.dll) that allow remote code execution. The documented vectors involve overly long values in SonicMediaPlayer.dll (DiskType method) or other long arguments to S...

CVE-2007-1955

Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the 1 DownloadCert, 2 DecryptFileByKey, and 3 EncryptFileByKey functions, a different module and vectors th...

Internet Pictures Corporation iPIX Image Well ActiveX controls contain buffer overflows

Overview The Internet Pictures Corporation iPIX Image Well ActiveX controls contain buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Internet Pictures Corporation has produced equipment and software to create 360...

Several Windows image viewers vulnerabilities

I made a small research covering security of several Windows offline image viewers. Although, when discussing security of image viewing software, web browsers are usually implied, since they will be on the 'front lines' in the unsafe environment such as the Internet, this research lists several...

Fedora Core 6 : openoffice.org-2.0.4-5.5.17 (2007-376)

CVE-2007-0239 rhbz228008 potential shell escape problem in some hyperlinks CVE-2007-0238 rhbz226966 potential buffer overflows in calc legacy file format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

SAP RFC library multiple security vulnerabilities

Buffer overflows, DoS conditions and information leak in TRUSTEDSYSTEMSECURITY, RFCSTARTPROGRAM, RFCSTARTGUI, SYSTEMCREATEINSTANCE, RFCSETREGSERVERPROPERTY...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0095 Updated krb5 packages that fix a number of issues are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers...

PHP < 5.2.1 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 5.2.1. Such versions may be affected by several issues, including buffer overflows, format string vulnerabilities, arbitrary code execution, 'safemode' and 'openbasedir' bypasses, and clobbering of super-global...

PHP < 4.4.5 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 4.4.5. Such versions may be affected by several issues, including buffer overflows, format string vulnerabilities, arbitrary code execution, 'safemode' and 'openbasedir' bypasses, and clobbering of super-global...

NetBSD reference ISO protocol implementation multiple security vulnerabilities

Buffer overflows in different functions...

CVE-2007-1677

CVE-2007-1677 affects the NetBSD kernel ISO network protocol support. The vulnerability consists of multiple buffer overflows in the clnp_route-related handling, allowing a local user to execute arbitrary code via overly long sockaddr structures. Impact is local code execution with the same privi...

Stack overflow

Multiple stack-based buffer overflows in High Performance Anonymous FTP Server hpaftpd 1.01 allow remote attackers to execute arbitrary code via long arguments to the 1 USER, 2 PASS, 3 CWD, 4 MKD, 5 RMD, 6 DELE, 7 RNFR, or 8 RNTO FTP command...

CVE-2007-1731

Multiple stack-based buffer overflows in High Performance Anonymous FTP Server hpaftpd 1.01 allow remote attackers to execute arbitrary code via long arguments to the 1 USER, 2 PASS, 3 CWD, 4 MKD, 5 RMD, 6 DELE, 7 RNFR, or 8 RNTO FTP command...

hpaftpd multiple buffer overflows

Buffer overflows in multiple FTP commands...

[NEWS] hpaftpd Multiple Buffer Overflows

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Fedora Core 6 : libwpd-0.8.9-1.fc6 (2007-351)

CVE-2007-0002 buffer overflows in wordperfect document parsing Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...