6589 matches found
CVE-2004-0904
Integer overflow in the bitmap BMP decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows...
DEBIAN-CVE-2004-1186
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service application crash...
USN-53-1: imlib vulnerabilities
Pavel Kankovsky discovered several buffer overflows in imlib. If an attacker tricked a user into loading a malicious image, he could exploit this to execute arbitrary code in the context of the user opening the image...
Debian DSA-618-1 : imlib - buffer overflows, integer overflows
Pavel Kankovsky discovered that several overflows found in the libXpm library were also present in imlib, an imaging library for X and X11. An attacker could create a carefully crafted image file in such a way that it could cause an application linked with imlib to execute arbitrary code when the...
[SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 618-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...
Multiple Orcale bugs
Buffer overflows, DoS, SQL injections, etc...
CVE-2004-0803
Multiple vulnerabilities in the RLE run length encoding decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files...
Mandrake Linux Security Advisory : mplayer (MDKSA-2004:157)
A number of vulnerabilities were discovered in the MPlayer program by iDEFENSE, Ariel Berkman, and the MPlayer development team. These vulnerabilities include potential heap overflows in Real RTSP and pnm streaming code, stack overflows in MMST streaming code, and multiple buffer overflows in the...
CVE-2004-1261
Multiple buffer overflows in the preparse function in asp2php 0.76.23 allow remote attackers to execute arbitrary code via crafted ASP scripts...
CVE-2004-1289
CVE-2004-1289 affects pcal 4.7.1, where multiple buffer overflows in (1) getline in pcalutil.c and (2) get_holiday in readfile.c allow remote attackers to execute arbitrary code via a crafted calendar file. The vulnerability has a CVSS v2 base score of 10.0 (HIGH). Public advisories (e.g., Debian...
USN-42-1: Xine library vulnerabilities
Several buffer overflows have been discovered in xine-lib, the video/audio codec library for Xine frontends xine-ui, totem-xine, kaffeine, and others. If an attacker tricked a user into loading a malicious RTSP stream or a stream with specially crafted AIFF audio or PNM image data, they could...
NetBSD kernel local vulnerabilities
Name: NetBSD kernel local vulnerabilities Date: Dec 18, 2004 Author: Evgeny Demidov Description: There exists multiple vulnerabilities in NetBSD binary compatibility code. They can be approximately divided into two parts: 1 signal number validation problems in xxxsyskill,xxxsyssigaction and simil...
gd: additional overflows
Multiple buffer overflows in the gd graphics library libgd 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990...
USN-40-1: PHP vulnerabilities
Stefan Esser reported several buffer overflows in PHP's variable unserializing handling. These could allow an attacker to execute arbitrary code on the server with the PHP interpreter's privileges by sending specially crafted input strings form data, cookie values, and similar. Additionally, Ilia...
libxml2 various overflows
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 libxml2, and possibly other versions, may allow remote attackers to execute arbitrary code via 1 a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, 2 a long proxy URL containing FTP data that is not properly handled...
CVE-2004-1025
CVE-2004-1025 concerns multiple heap-based buffer overflows in imlib 1.9.14 and earlier, a library used by gkrellm and several window managers. The vulnerability allows remote attackers to crash the application and, per the description, to execute arbitrary code via crafted image files, effective...
CVE-2004-1025
Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...
[SECURITY] [DSA 609-1] New atari800 packages fix local root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 609-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 609-1] New atari800 packages fix local root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 609-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2004 http://www.debian.org/security/faq -...