Putty pscp 0.66 - Stack Buffer Overwrite

Putty pscp 0.66 - Stack Buffer Overwrite Source: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-2563 Author: Date: Feb 20th, 2016 Name: putty Vendor: sgtatham - http://www.chiark.greenend.org.uk/sgtatham/putty/ Version: 0.59 3 9 years ago = affected = 0.66 Platforms: win/nix Technolog...

Internet Bug Bounty: putty pscp client-side post-auth stack buffer overwrite when processing remote file size

Not sure if this will qualify but it may impact a pretty broad audience given the fact that putty code is part of many other apps filezilla, ... and it is the defacto standalone ssh client for windows administrators besides openssh cygwin putty = 0.66; affects putty versions dating back 9 years...

PT-2017-3937

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.7alpha Description The issue is related to the kwajd read headers function in libmspack, which can cause a one or two byte overwrite due to bad KWAJ file header extensions. This can lead to a buffer overflow in...

CVE-2007-3506

The ftbitmapassurebuffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors involving bitmap fonts, related to a "memory buffer overwrite bug."...

openSUSE Security Update : glibc (openSUSE-SU-2013:1510-1)

This update fixes the following issues in glibc : - CVE-2012-4412: glibc: buffer overflow in strcoll - CVE-2013-0242: glibc: DoS due to a buffer overrun in regexp matcher by processing multibyte characters - CVE-2013-1914: glibc: stack overflow in getaddrinfo sorting - CVE-2013-2207: glibc: ptcho...

CVE-2013-1324

Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote attackers to execute arbitrary code via a crafted WordPerfect document .wpd file, aka "Word Stack Buffer Overwrite Vulnerability."...

Fedora 19 : mod_fcgid-2.3.9-1.fc19 (2013-18638)

Current upstream maintenance release, including a security fix for a possible heap buffer overwrite issue CVE-2013-4365. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 20 : mod_fcgid-2.3.9-1.fc20 (2013-18579)

Current upstream maintenance release, including a security fix for a possible heap buffer overwrite issue CVE-2013-4365. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Microsoft Excel 2007 SP2 Buffer Overwrite Exploit

No description provided by source. Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : A remote code...

Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)

Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : A remote code execution vulnerability exists in the w...

Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)

Microsoft Excel 2007 SP2 - Buffer Overwrite MS11-021 Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : ...

RHEL 6 : libpng (RHSA-2011:1105)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1105 advisory. - libpng: regression of CVE-2004-0421 in 1.2.23+ CVE-2011-2501 - libpng: buffer overwrite in pngrgbtogray CVE-2011-2690 - libpng: Invalid re...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2537146)

This host is missing an important security update according to Microsoft Bulletin MS11-045. OpenVAS Vulnerability Test $Id: secpodms11-045.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2537146 Authors: Madhuri D Copyright: Copyright c 2011 SecPo...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2489279)

This host is missing a critical security update according to Microsoft Bulletin MS11-021. OpenVAS Vulnerability Test $Id: secpodms11-021.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2489279 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPo...

Fedora 13 : mod_fcgid-2.3.6-1.fc13 (2010-17434)

This update to the current upstream maintenance release includes a fix for a possible stack buffer overwrite CVE-2010-3872. It also changes the default value of FcgidMaxRequestLen from 1GB to 128K; administrators should change this to an appropriate value based on site requirements. Other changes...

Fedora 12 : mod_fcgid-2.3.6-1.fc12 (2010-17474)

This update to the current upstream maintenance release includes a fix for a possible stack buffer overwrite CVE-2010-3872. It also changes the default value of FcgidMaxRequestLen from 1GB to 128K; administrators should change this to an appropriate value based on site requirements. Other changes...

Fedora 14 : mod_fcgid-2.3.6-1.fc14 (2010-17472)

This update to the current upstream maintenance release includes a fix for a possible stack buffer overwrite CVE-2010-3872. It also changes the default value of FcgidMaxRequestLen from 1GB to 128K; administrators should change this to an appropriate value based on site requirements. Other changes...

DEBIAN-CVE-2008-3910

dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...

SuSE 10 Security Update : Firefox (ZYPP Patch Number 1960)

This security update brings Mozilla Firefox to version 1.5.0.6. More details can be found on: http://www.mozilla.org/projects/security/known-vulnerabiliti es.html It includes fixes to the following security problems : - Code execution through deleted frame reference. CVE-2006-3801 / MFSA 2006-44...

Buffer overflow

The ftbitmapassurebuffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors involving bitmap fonts, related to a "memory buffer overwrite bug."...