SystemTap 1.0/1.1 - '__get_argv()' / '__get_compat_argv()' Local Memory Corruption

source: https://www.securityfocus.com/bid/38120/info SystemTap is prone to multiple local memory-corruption vulnerabilities. An attacker may exploit these issues to execute arbitrary code with SYSTEM privileges. Failed exploit attempts will result in a denial of service. SystemTap 1.1 is...

RedHat Security Advisory RHSA-2009:1680

The remote host is missing updates announced in advisory RHSA-2009:1680. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in Xpdf's Type 1 font parser. A specially-crafted PDF file with an...

Certain domain names can allow execution of arbitrary code

Specially crafted domain names can cause a memory corruption in Opera, which may lead to a crash. Successful exploitation can lead to execution of arbitrary code...

Sendmail 8.12.x - 'X-header' Remote Heap Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/34944/info Sendmail is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer. Successfully exploiting this issue may allow an attacker to...

CVE-2009-1444

PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...

Security Update for Microsoft Excel 2002 (KB959988)

A security vulnerability exists in Microsoft Excel 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Ubuntu: Security Advisory (USN-617-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for vim-common CESA-2008:0617 centos4 x86_64

Check for the Version of vim-common OpenVAS Vulnerability Test CentOS Update for vim-common CESA-2008:0617 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Security Update for Microsoft Office Word 2003 (KB956357)

A security vulnerability exists in Microsoft Office Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Sun Java AWT Library Sandbox Violation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Java. User interaction is required in that a user must open a malicious file or visit a malicious web page. The specific flaw occurs within the Java AWT library. If a custom image...

CVE-2008-0550

Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header...

Debian: Security Advisory (DSA-360)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-3927

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 1 allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and 2 allow attackers to have an unknown impact via an unspecified vector related to "subscribe."...

GLSA-200706-09 : libexif: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200706-09 libexif: Buffer overflow iDefense Labs have discovered that the exifdataloaddataentry function in libexif/exif-data.c improperly handles integer data while working with an image with many EXIF components, allowing an...

CVE-2007-2096

PHP remote file inclusion vulnerability in common.php in Hinton Design PHPHD Download System phphddownloads allows remote attackers to execute arbitrary PHP code via a URL in the phphdrealpath parameter. NOTE: this issue may be present in versions from 2006...

CVE-2007-1984

PHP remote file inclusion vulnerability in index.php in lite-cms 0.2.1 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

CVE-2006-5403

The CVE-2006-5403 issue is a stack-based buffer overflow in the Symantec Automated Support Assistant ActiveX control (used in Norton Antivirus/Internet Security/System Works). The CERT entry notes the vulnerable ActiveX control is locked to the symantec.com domain, requiring a user to view a craf...

CVE-2006-5006

Buffer overflow in cfgmgr in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long directory path argument...

CVE-2006-4007

PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GBPATH parameter...

CVE-2006-3460

Heap-based buffer overflow in the JPEG decoder in the TIFF library libtiff before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size TiffScanLineSize...