DEBIAN-CVE-2010-2286

The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service infinite loop via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."...

CVE-2010-1879

Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability."...

CVE-2010-1880

Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "MJPEG Media Decompression Vulnerability."...

CVE-2010-1510

Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...

Heap overflow

Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...

CVE-2010-1510

Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...

CVE-2010-1510

CVE-2010-1510 affects IrfanView prior to 4.27, where parsing PSD images with RLE compression can trigger a heap-based buffer overflow, leading to a possible crash or remote code execution. Public sources consistently describe this in IrfanView’s PSD RLE decompression path, with Secunia citing the...

CVE-2010-1510: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...

RHEL 5 : curl (RHSA-2010:0273)

Updated curl packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Mandriva Update for clamav MDVSA-2010:082 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2010:082 clamav Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Linux Security Advisory : clamav (MDVSA-2010:082-1)

Multiple vulnerabilities has been found and corrected in clamav : ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities CVE-2010-0098. The...

Memory corruption

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

DEBIAN-CVE-2010-1311

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

CVE-2010-1311

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

CVE-2010-1311

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

CVE-2010-1311: Improper Input Validation

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

Memory corruption

Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted disk image with bzip2 compression...

CVE-2010-0065

Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted disk image with bzip2 compression...

curl: zlib-compression causes curl to pass more than CURL_MAX_WRITE_SIZE bytes to write callback

contentencoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service application crash or have unspecified othe...