2241 matches found
CVE-2008-6662
AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption...
CVE-2008-6662: Improper Input Validation
AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption...
Ubuntu Update for avahi vulnerability USN-402-1
Ubuntu Update for Linux kernel vulnerabilities USN-402-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4021.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for avahi vulnerability USN-402-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for dovecot vulnerability USN-487-1
Ubuntu Update for Linux kernel vulnerabilities USN-487-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4871.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for dovecot vulnerability USN-487-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Code injection
The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...
Debian DSA-1737-1 : wesnoth - several vulnerabilities
Several security issues have been discovered in wesnoth, a fantasy turn-based strategy game. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0366 Daniel Franke discovered that the wesnoth server is prone to a denial of service attack when receiving...
djbdns records poisoning
Ivalid processing of compressed response allows to inject additional NS records...
Fedora Update for comix FEDORA-2008-2993
Check for the Version of comix OpenVAS Vulnerability Test Fedora Update for comix FEDORA-2008-2993 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Integer overflow
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code via a crafted RPM compressed archive file, whic...
Multiple security vulnerabilities in different antiviral applications
ClamAV: LZH DoS; BitDefender: multiple integer overflow on PE parsing; Avast: multiple buffer overflows on ISO and RPM parsing; AVG: crash on UPX files; Sophos: multiple DoS on different compressed formats parsing; F-Secure F-prot: protection bypass...
CVE-2008-5352
Integer overflow in the JAR unpacking utility unpack200 in the unpack library unpack.dll in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JA...
Integer overflow
Integer underflow in demuxqt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service crash via a crafted media file that results in a small value of moovatomsize in a compressed MOV aka CMOVATOM...
BitDefender - Module pdf.xmd Infinite Loop Denial of Service (PoC)
BitDefender - Module pdf.xmd Infinite Loop Denial of Service PoC Deny Of Service and infinite loop in BitDefender module pdf.xmd / ProTeuS @ cih.ms / tested on pdf.xmd BitDefender's pdf engine by Alexandru Matei 0.1,Oct 8 2008, CRC32=A393F805 and on pdf.xmd last update by the moment of publicatio...
Fedora 8 : optipng-0.6.2-1.fc8 (2008-9639)
The main reason for this update is a buffer overflow that is removed in this version, that could be triggered by processing specially crafted bitmap images .bmp. Aggregated upstream changelog: ============================== ++ Put back a speed optimization, accidentally removed in version 0.6,...
Information disclosure
Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier allows remote attackers to cause a denial of service memory consumption or application crash via malformed compressed files. NOTE: some of these details are obtained from third...
CVE-2008-4429
Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier allows remote attackers to cause a denial of service memory consumption or application crash via malformed compressed files. NOTE: some of these details are obtained from third...
CVE-2008-4429: Undefined Security Weakness
Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier allows remote attackers to cause a denial of service memory consumption or application crash via malformed compressed files. NOTE: some of these details are obtained from third...
GLSA-200809-17 : Wireshark: Multiple Denials of Service
The remote host is affected by the vulnerability described in GLSA-200809-17 Wireshark: Multiple Denials of Service The following vulnerabilities were reported: Multiple buffer overflows in the NCP dissector CVE-2008-3146. Infinite loop in the NCP dissector CVE-2008-3932. Invalid read in the...
Wireshark Multiple Vulnerabilities - Sept-08 (Windows)
Check for vulnerable version of Wireshark/Ethereal OpenVAS Vulnerability Test $Id: secpodwiresharkmultvulnsept08win900212.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Wireshark Multiple Vulnerabilities - Sept-08 Windows Authors: Veerendra GG Copyright: Copyright C 2008 SecPod,...
CVE-2008-3933
Wireshark formerly Ethereal 0.10.14 through 1.0.2 allows attackers to cause a denial of service crash via a packet with crafted zlib-compressed data that triggers an invalid read in the tvbuncompress function...