CVE-2006-4336: Undefined Security Weakness

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...

gzip contains a buffer underflow

Overview The gzip program contains a buffer underflow vulnerability that may allow an attacker to execute arbitrary code, or create a denial-of-service condition. Description The gzip program is used to compress and decompress archived files.A buffer underflow vulnerability exists in gzip. An...

ncompress: .bss buffer underflow in decompression

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

CVE-2006-1168

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

DEBIAN-CVE-2006-1168

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

CVE-2006-1168

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

CVE-2006-1168

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

Buffer overflow

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

CVE-2006-1168

CVE-2006-1168 is referenced in the MiracleLinux Nessus advisories for BusyBox packages (MiracleLinux 3/4). The initial CVE description states: the decompress function in compress42.c of ncompress 4.2.4 and liblzw can be exploited by crafted data to cause a denial of service (crash) and possibly e...

CVE-2006-1168

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

CVE-2006-1168: Undefined Security Weakness

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

[SECURITY] [DSA 1149-1] New ncompress packages fix potential code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1149-1 [email protected] http://www.debian.org/security/ Martin Schulze August 10th, 2006 http://www.debian.org/security/faq -...

DSA-1149-1 ncompress - buffer underflow

Bulletin has no description...

CVE-2006-4024

The FESTAHESLoad function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflo...

CVE-2006-4024

The FESTAHESLoad function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflo...

CVE-2006-4024

The CVE-2006-4024 vulnerability affects Festalon (versions 0.5.0–0.5.5), where FESTAHES_Load in pce/hes.c accepts a negative LoadAddr in a HES file. This value is used as an offset in a memcpy, enabling a buffer underflow that can crash the process and potentially allow arbitrary code execution b...

CVE-2006-4024: Undefined Security Weakness

The FESTAHESLoad function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflo...

php local buffer underflow could lead to arbitary code execution

Affected versions: php 5.1.4 and older, 4.4.3 and possibly older Cause: when php-s sscanf functions format argument contains argument swap and extra arguments are given like. sscanf'foo ','$1s',$bar then it reads an pointer to pointer to zval structure past the end of argument array by one. Php...

CVE-2004-2620

The MIMEHreadheaders function in ripMIME 1.3.1.0 does not properly handle trailing "\r" and "\n" characters in headers, which leads to a buffer underflow...

CVE-2004-2620

The CVE-2004-2620 issue affects ripMIME 1.3.1.0, specifically the MIMEH_read_headers function. The vulnerability arises from improper handling of trailing "\r" and "\n" characters in headers, which leads to a buffer underflow. This is documented across multiple connected entries (Red Hat, CVE lis...