iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 05.12.09 http://labs.idefense.com/intelligence/vulnerabilities/ May 12, 2009 I. BACKGROUND Microsoft PowerPoint is the presentation application that is included with Microsoft Corp's Office productivity software suite. More...

Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control stack buffer overflows

Overview The Microsoft Whale Intelligent Application Gateway Whale Client Components ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Whale Communications Intelligent...

[Backports-security-announce] Security Update for uw-imap

Magnus Holmgren uploaded new packages for uw-imap which fixed the following security problems: CVE-2008-5005 Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local user...

UW-imapd tmail and dmail BOF Vulnerabilities (Linux)

The host has UW-imapd installed and is prone to Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbuwimapdtmailndmailbofvulnlin.nasl 4227 2016-10-07 05:45:35Z teissa $ UW-imapd tmail and dmail BOF Vulnerabilities Linux Authors: Veerendra GG Copyright: Copyright c 2008 Greenbone...

Streamripper Multiple Buffer Overflow Vulnerabilities (Linux)

The host is installed with Streamripper, which is prone to Multiple Buffer Overflow Vulnerabilities. OpenVAS Vulnerability Test $Id: gbstreamrippermultbofvulnnov08lin.nasl 5158 2017-02-01 14:53:04Z mime $ Streamripper Multiple Buffer Overflow Vulnerabilities Linux Authors: Veerendra GG Copyright:...

Streamripper Multiple Buffer Overflow Vulnerabilities - Linux

Streamripper is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash CS3 SWF Processing Buffer Overflow Vulnerabilities

This host is installed with Adobe Flash CS3 and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashcs3swfprocbofvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Adobe Flash CS3 SWF Processing Buffer Overflow Vulnerabilities Authors: Chandan S Copyright: Copyright c...

Gentoo Security Advisory GLSA 200503-25 (OpenSLP)

The remote host is missing updates announced in advisory GLSA 200503-25. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-23 (exim)

The remote host is missing updates announced in advisory GLSA 200501-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CentOS 4 : evolution28 (CESA-2008:0515)

Updated evolution28 packages that address two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring,...

AIX 5.2 TL 10 : printers.rte (U815029)

The remote host is missing AIX PTF U815029, which is related to the security of the package printers.rte. Buffer overflow vulnerabilities exist in the 'printers.rte' fileset commands listed below. A local attacker may execute arbitrary code with root privileges because the commands are setuid roo...

Toshiba Surveillance Surveillix DVR MeIpCamX.dll 1.0 - ActiveX Control Buffer Overflow

Toshiba Surveillance Surveillix DVR MeIpCamX.dll 1.0 - ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/27360/info Surveillix DVR 'MeIpCamX.DLL' ActiveX control is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary...

Buffer-overflow and format string in VideoLAN VLC 0.8.6d

Luigi Auriemma Application: VideoLAN VLC http://www.videolan.org Versions: = 0.8.6d Platforms: Windows, Mac, BSD, nix and more Bugs: A buffer-overflow in the handling of the subtitles originally found by Michal Luczaj B format string in the web interface Exploitation: A local B remote Date: 24 De...

CVE-2007-6277

Multiple buffer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large 1 Metadata Block Size, 2 VORBIS Comment String Size, 3 Picture Metadata MIME-TYPE Size, 4 Picture Description Size, 5 Picture Data Length, 6...

Trend Micro ServerProtect SpntSvc RPC buffer overflow

Added: 09/21/2007 CVE: CVE-2007-4218 BID: 25395 OSVDB: 39753 Background ServerProtect is a virus scanner for servers. The Trend Micro ServerProtect service SpntSvc.exe handles RPC requests on port 5168/TCP. Problem Buffer overflow vulnerabilities in the Trend Micro ServerProtect service allow...

iDefense Security Advisory 08.09.07: Hewlett-Packard OpenView Operations OVTrace Buffer Overflow Vulnerabilities

Hewlett-Packard OpenView Operations OVTrace Buffer Overflow Vulnerabilities iDefense Security Advisory 08.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 09, 2007 I. BACKGROUND OpenView Operations software is a suite of network management tools used to monitor events on, and...

SAP DB 7.x Web Server - 'WAHTTP.exe' Multiple Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploiting these issues will allow an...

CVE-2007-2948

Multiple stack-based buffer overflows in stream/streamcddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long 1 album title or 2 category...

Second Sight Software ActiveGS ActiveX control stack buffer overflows

Overview The Second Sight Software ActiveGS ActiveX control contains several stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Second Sight Software ActiveGS is an Apple IIGS emulator that is provided as an...

Akamai Download Manager ActiveX Control < 2.2.1.0 Multiple Vulnerabilities

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly contains two stack-based buffer overflow vulnerabilities. A remote attacker may be able to leverage these issues...