libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c

XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow...

DEBIAN-CVE-2015-9262

XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow...

CVE-2007-5199

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact...

CVE-2007-5199

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact...

CVE-2007-5199

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact...

CVE-2007-5199

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact...

OpenJPEG Single Byte Overflow Vulnerability

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 suffers from a single-byte overflow vulnerability in the openjp2/pi.c:523 opjpinextcprl function, which can lead to a denial of service...

From the byte overflows to arbitrary code execution-Linux stack exploit-vulnerability warning-the black bar safety net

One byte overflow called off-by-one, once a period of time, the off-by-one is considered to be not utilized, but later research found on the heap even if only one byte overflow can lead to arbitrary code execution. At the same time the heap of the off-by-one using also appear in the domestic and...

Wireshark 'pcapng.c' Denial of Service Vulnerability

Wireshark is an open source network protocol analysis tool. The pcapngread function in Wireshark wiretap/pcapng.c handles malicious messages with a single-byte overflow error, allowing an attacker to exploit a vulnerability by submitting a special message to crash the application...

Apple OS X IOAcceleratorFamily Single Byte Memory Error Elevation of Privilege Vulnerability

Apple Mac OS X is a commercial BSD-based operating system. Apple Mac OS X IOAcceleratorFamily has a single-byte overflow memory error that allows attackers to exploit a vulnerability to elevate privileges...

Ubuntu: Security Advisory (USN-2466-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

musl "fmt_fp()"单字节溢出漏洞

Musl是一个轻量级的C标准库。 Musl "fmtfp"函数src/stdio/vfprintf.c存在单字节溢出错误，允许攻击者利用漏洞使链接此库的应用崩溃。 0 musl 0.x Musl 1.0.0已经修复该漏洞，建议用户下载更新： http://www.musl-libc.org...

Nagios "process_cgivars()" 单字节溢出漏洞

Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios 3.x及4.x版本的函数 "processcgivars" 在实现上存在单字节溢出漏洞，攻击者利用特制的键值，成功利用后可造成越界读取内存。 0 Nagios Nagios 4.x Nagios Nagios 3.x 厂商补丁： Nagios ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Apple Safari "libxml"远程代码执行漏洞

BUGTRAQ ID: 48832 CVE ID: CVE-2011-0216 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari 5.0.6之前版本在libxml的实现上存在单字节溢出漏洞，攻击者可利用此漏洞在受影响应用程序下执行任意代码或造成拒绝服务。 Apple Safari 5.x Apple Safari 4.x Apple TV 4.3 Apple TV 4.2 Apple TV 4.1 Apple TV 4.0 Apple TV 2.1 Apple TV 1.0 Apple iOS 4.x 厂商补丁...

Perl Compress::Raw::Bzip2模块单字节溢出漏洞

CVECAN ID: CVE-2009-1884 Compress::Raw::Zlib2是Perl中使用的一个模块，提供了到zlib2压缩库的低层接口。 Compress-Raw-Bzip2模块的Bzip2.xs中的bzinflate函数存在单字节堆溢出漏洞。如果用户处理了特制的bzip2压缩流，就可以触发这个溢出，导致使用该模块的应用程序崩溃或挂起。 CPAN Compress::Raw::Bzip2 2.x 厂商补丁： CPAN ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

apr-util single NULL byte buffer overflow

Off-by-one error in the aprbrigadevprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service application crash via crafted input...

apr-util single NULL byte buffer overflow

Off-by-one error in the aprbrigadevprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service application crash via crafted input...

Fedora Core 10 FEDORA-2009-5191 (nsd)

The remote host is missing an update to nsd announced via advisory FEDORA-2009-5191. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-5190 (nsd)

The remote host is missing an update to nsd announced via advisory FEDORA-2009-5190. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 10 : nsd-3.2.2-2.fc10 (2009-5191)

Security release. A one-byte overflow bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other system exploits. http://www.nlnetlabs.nl/publications/NSDvulnerabilityannouncement.ht ml Note that Tenable Network Securi...