CVE-2008-3477

Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to...

CVE-2008-3544

Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long 1 REQUESTSEVCHANGE aka number 47, 2 REQUESTSAVESTATE aka number 61, or 3 REQUESTRESTORESTATE aka numb...

Novell eDirectory multiple security vulnerabilities

Multiple buffer overflows on TCP/8028 and TCP/8028 traffic parsing...

GLSA-200810-01 : WordNet: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200810-01 WordNet: Execution of arbitrary code Jukka Ruohonen initially reported a boundary error within the searchwn function in src/wn.c. A thorough investigation by the oCERT team revealed several other vulnerabilities in...

CVE-2008-4384

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control LPControl.dll, as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the 1 url, 2 toolbar, and 3 enableZoomPastMax methods...

Stack overflow

Multiple stack-based buffer overflows in MGI Software LPViewer ActiveX control LPControl.dll, as acquired by Roxio and iseemedia, allow remote attackers to execute arbitrary code via the 1 url, 2 toolbar, and 3 enableZoomPastMax methods...

WordNet: Execution of arbitrary code

Background WordNet is a large lexical database of English. Description Jukka Ruohonen initially reported a boundary error within the searchwn function in src/wn.c. A thorough investigation by the oCERT team revealed several other vulnerabilities in WordNet: Jukka Ruohonen and Rob Holland oCERT...

openSUSE 10 Security Update : cups (cups-5652)

Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server CVE-2008-3639, CVE-2008-3640, CVE-2008-3641. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 10 Security Update : CUPS (ZYPP Patch Number 5653)

Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server. CVE-2008-3639 / CVE-2008-3640 / CVE-2008-3641 %NASLMINLEVEL 70300 C Tenable Network Security,...

iseemedia / Roxio / MGI Software LPViewer ActiveX control stack buffer overflows

Overview The iseemedia LPViewer ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The iseemedia LPViewer ActiveX control, which is provided by the file LPControl.dll, is a...

CVE-2008-4402

Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2008-4402

Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087 allow remote attackers to execute arbitrary code via unspecified vectors...

GLSA-200809-17 : Wireshark: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200809-17 Wireshark: Multiple Denials of Service The following vulnerabilities were reported: Multiple buffer overflows in the NCP dissector CVE-2008-3146. Infinite loop in the NCP dissector CVE-2008-3932. Invalid read in the...

Wireshark: Multiple Denials of Service

Background Wireshark is a network protocol analyzer with a graphical front-end. Description The following vulnerabilities were reported: Multiple buffer overflows in the NCP dissector CVE-2008-3146. Infinite loop in the NCP dissector CVE-2008-3932. Invalid read in the tvbuncompress function when...

Gentoo Security Advisory GLSA 200502-19 (postgresql)

The remote host is missing updates announced in advisory GLSA 200502-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200412-17 (kfax)

The remote host is missing updates announced in advisory GLSA 200412-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200803-17 (pdflib)

The remote host is missing updates announced in advisory GLSA 200803-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200604-14 (dia)

The remote host is missing updates announced in advisory GLSA 200604-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200703-22 (nss)

The remote host is missing updates announced in advisory GLSA 200703-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-05 (libxml2)

The remote host is missing updates announced in advisory GLSA 200411-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...