KDE Konqueror 3.0.3 - Malformed HTML Page Denial of Service

source: https://www.securityfocus.com/bid/7486/info KDE Konqueror has been reported prone to a denial of service vulnerability when rendering a HTML page that contains malformed data. Although unconfirmed, code execution may be possible. The precise technical details of this vulnerability are...

GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow

GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow source: https://www.securityfocus.com/bid/6642/info A buffer overflow condition has been reported for the CuteFTP application. The vulnerability is due to insufficient bounds checking performed on certain FTP command responses. If CuteFTP is...

GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow

source: https://www.securityfocus.com/bid/6642/info A buffer overflow condition has been reported for the CuteFTP application. The vulnerability is due to insufficient bounds checking performed on certain FTP command responses. If CuteFTP is used to connect to a malicious FTP server that sends an...

PHP socket_iovec_alloc() Function Overflow

The remote host is running a version of PHP that is older than 4.3.2. There is a flaw in this version that could allow an attacker who has the ability to inject an arbitrary argument to the function socketiovecalloc to crash the remote service and possibly to execute arbitrary code. For this atta...

NetPBM contains multiple buffer overflow vulnerabilities

Overview NetPBM is a set of graphics conversion tools and has been found to contain multiple buffer overflow vulnerabilities. Description A code review of NetPBM has revealed multiple buffer overflow vulnerabilities. These vulnerabilities could be exploited by loading malicious image files. ---...

MS02-040 / MS03-033: Unchecked buffer in MDAC Function (326573 / 823718)

The remote Microsoft Data Access Component MDAC server is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host, provided he can load and execute a database query on this server. C Tenable Network Security, Inc. MS03-033 supercedes MS02-040 Note: The fix for thi...

Microsoft Security Bulletin MS03-006: Flaw in Windows Me Help and Support Center Could Enable Code Execution (812709)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------- Title: Flaw in Windows Me Help and Support Center Could Enable Code Execution 812709 Date: 26 February, 2003 Software: Microsoft Windows Me Impact: Run Code of Attacker's Choice Max Risk: Critica...

Microsoft Windows NT2000 - cmd.exe CD Buffer Overflow (PoC)

Microsoft Windows NT2000 - cmd.exe CD Buffer Overflow PoC source: https://www.securityfocus.com/bid/6829/info The Windows NT and 2000 command prompt cmd.exe does not properly handle paths containing more than 256 characters. If the cd change directory command is used to change to a subdirectory...

Microsoft Windows NT/2000 - 'cmd.exe' CD Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/6829/info The Windows NT and 2000 command prompt cmd.exe does not properly handle paths containing more than 256 characters. If the cd change directory command is used to change to a subdirectory resulting in a path with more than 256 characters, a buffer...

mpg123 pre0.59s - Invalid MP3 Header Memory Corruption

mpg123 pre0.59s - Invalid MP3 Header Memory Corruption // source: https://www.securityfocus.com/bid/6593/info A memory corruption vulnerability has been reported for mpg123 that may result in code execution. The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, whe...

Microsoft Security Bulletin MS02-065: Buffer Overrun in Microsoft Data Access Components Could Lead to Code Execution (Q329414)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Buffer Overrun in Microsoft Data Access Components Could Lead to Code Execution Q329414 Date: 20 November, 2002 Software: Microsoft Data Access Components MDAC 2.1 Microsoft Data...

Lonerunner Zeroo HTTP Server 1.5 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/6190/info Zeroo HTTP server is a freely available, open source web server. It is available for the Linux and Microsoft Windows platforms. It has been reported that Zeroo HTTP server does not sufficiently check bounds on some requests. This occurs when a...

DSA-182 kdegraphics - buffer overflow

Bulletin has no description...

MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (329048)

The remote host contains a version of Windows that has a security flaw in the compressed files ZIP implementation. An attacker can exploit this flaw by sending a malicious zip file to the remote user. When the user opens the file with Explorer, arbitrary code will be executed. C Tenable Network...

MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (323255)

The remote host contains a version of the HTML Helpfacility ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. C Tenable Network Security, Inc. include"compat.inc"; if description...

Critical: Red Hat Security Advisory: : Updated fetchmail packages fix vulnerabilities

Updated fetchmail packages are available for Red Hat Linux 6.2, 7, 7.1, 7.2, 7.3, and 8.0 which close a remotely-exploitable vulnerability in unpatched versions of fetchmail prior to 6.1.0. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links su...

Security Bulletin MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255)

---------------------------------------------------------------------- Title: Unchecked Buffer in Windows Help Facility Could Enable Code Execution Q323255 Date: 02 October 2002 Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Millennium Edition Microsoft...

MySimpleNews 1.0 - PHP Injection

MySimpleNews 1.0 - PHP Injection source: https://www.securityfocus.com/bid/5865/info MySimpleNews allows users to enter news articles through a web interface. It will allow PHP code to be injected into URI parameters of the 'users.php' script, which will be stored into a MySimpleNews file...

Code execution via Microsoft Visual FoxPro

.app files are open without any warning...

[SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use

-------------------------------------------------------------------------- Debian Security Advisory DSA 159-1 [email protected] http://www.debian.org/security/ Martin Schulze August 28th, 2002 http://www.debian.org/security/faq -...