CVE-2009-1376

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

CVE-2009-1376

The CVE-2009-1376 issue is a Libpurple/Pidgin memory corruption vulnerability: multiple integer overflows in msn_slplink_process_msg() (MSN protocol) and related slplink code on 32-bit platforms allow remote attackers to cause buffer overflows and potentially execute arbitrary code. The flaw stem...

CVE-2009-1376

Multiple integer overflows in the msnslplinkprocessmsg functions in the MSN protocol handler in 1 libpurple/protocols/msn/slplink.c and 2 libpurple/protocols/msnp9/slplink.c in Pidgin formerly Gaim before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed S...

GLSA-200905-05 : FreeType: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200905-05 FreeType: Multiple vulnerabilities Tavis Ormandy reported multiple integer overflows in the cffcharsetcomputecids function in cff/cffload.c, sfnt/tccmap.c and the ftsmoothrendergeneric function in smooth/ftsmooth.c,...

Debian DSA-1806-1 : cscope - buffer overflows

Matt Murphy discovered that cscope, a source code browsing tool, does not verify the length of file names sourced in include statements, which may potentially lead to the execution of arbitrary code through specially crafted source code files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CentOS 4 : evolution-data-server (CESA-2009:0354)

Updated evolution-data-server and evolution28-evolution-data-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution Data Server provide...

lcms multiple security vulnerabilities

Multiple buffer overflows and DoS conditions...

[ GLSA 200905-05 ] FreeType: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200905-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1806-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24, 2009 http://www.debian.org/security/faq -...

FreeType: Multiple vulnerabilities

Background FreeType is a high-quality and portable font engine. Description Tavis Ormandy reported multiple integer overflows in the cffcharsetcomputecids function in cff/cffload.c, sfnt/tccmap.c and the ftsmoothrendergeneric function in smooth/ftsmooth.c, possibly leading to heap or stack-based...

Mandriva Linux Security Advisory : lcms (MDVSA-2009:121-1)

Multiple security vulnerabilities has been identified and fixed in Little cms : A memory leak flaw allows remote attackers to cause a denial of service memory consumption and application crash via a crafted image file CVE-2009-0581. Multiple integer overflows allow remote attackers to execute...

Heap overflow

Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control csviewer.ocx 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the 1 SetFilePath and 2 SetClientCookie methods. NOTE: the provenance of this information is unknown; the details are...

CVE-2009-1740

Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control csviewer.ocx 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the 1 SetFilePath and 2 SetClientCookie methods. NOTE: the provenance of this information is unknown; the details are...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian DSA-1801-1 : ntp - buffer overflows

Several remote vulnerabilities have been discovered in NTP, the Network Time Protocol reference implementation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0159 A buffer overflow in ntpq allow a remote NTP server to create a denial of service...

FreeBSD Ports: cyrus-sasl

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] [DSA 1801-1] New ntp packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1801-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 19, 2009 http://www.debian.org/security/faq -...

CVE-2009-1671

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

PT-2009-4155 · Sun +1 · Sun Java Runtime Environment +1

Name of the Vulnerable Software and Affected Versions: Sun Java SE Runtime Environment aka JRE 6 Update 13 Description: The issue is related to multiple buffer overflows in the Deployment Toolkit ActiveX control. These overflows can be triggered by a long string argument to certain methods,...

Cscope < 15.7a Multiple Buffer Overflow Vulnerabilities

This host has installed Cscope and is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...