wv library: Multiple integer overflows

Background wv is a library for conversion of MS Word DOC and RTF files. Description The wv library fails to do proper arithmetic checks in multiple places, possibly leading to integer overflows. Impact An attacker could craft a malicious file that, when handled with the wv library, could lead to...

Solaris 2.6 (sparc) : 106881-03

The remote host is missing Sun Security Patch number 106881-03 SunScreen EFS 2.0: NAT, MP, and FW-1 conversion fixes. Date this patch was last updated by Sun : Wed Sep 08 18:00:00 MDT 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scrip...

JVN#30994815 MyODBC Japanese Conversion Edition denial of service vulnerability

Impact A remote attacker could cause a denial of service condition by sending a certain string in a response to a MySQL database. Solution Products Affected MyODBC Japanese Conversion Edition version 3.51.06, 2.50.29, 2.50.25 Development and maintenance of MyODBC Japanese Conversion Edition has...

Debian DSA-1155-2 : sendmail - programming error

It turned out that the sendmail binary depends on libsasl2 = 2.1.19.dfsg1 which is neither available in the stable nor in the security archive. This version is scheduled for the inclusion in the next update of the stable release, though. You'll have to download the referenced file for your...

Debian DSA-878-1 : netpbm-free - buffer overflow

A buffer overflow has been identified in the pnmtopng component of the netpbm package, a set of graphics conversion tools. This vulnerability could allow an attacker to execute arbitrary code as a local user by providing a specially crafted PNM file. The old stable distribution woody it not...

Multiple FreeBSD kernel integer overflow

Integer overflow and signed/unsigned conversion problems in i386setldt...

Crack telecommunications“starry sky rapid”limited-vulnerability warning-the black bar safety net

Install starry sky high speed,landing after the Internet,the starry sky extremely fast automatically sent to the server host NIC address,the server will mark out you've been using“sky speed”dial, once the tag is successful, the future no matter you use what dial-up software or the router will not...

CVE-2006-4785

Moodle

Thoroughly get super star--try it!- Vulnerability warning-the black bar safety net

A. Installation article 1. Installation If you previously installed a super star, please you go first in Control Panel to remove the super-star, and the installation directory deleted, and then in the registry, REGEDIT to delete the Super Stars. As follows: HKEYCURRENTUSERSoftware SUPERSTAR...

[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1155-2 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2006 http://www.debian.org/security/faq -...

DSA-1155 sendmail - programming error

Bulletin has no description...

Oracle Database string conversion buffer overflow

Added: 08/23/2006 BID: 10871 OSVDB: 9890 Background Oracle Database is a relational database product for multiple platforms. Problem The string conversion function in Oracle Database is affected by a buffer overflow vulnerability. A remote attacker could execute arbitrary commands by sending a lo...

Oracle Database string conversion buffer overflow

Added: 08/23/2006 BID: 10871 OSVDB: 9890 Background Oracle Database is a relational database product for multiple platforms. Problem The string conversion function in Oracle Database is affected by a buffer overflow vulnerability. A remote attacker could execute arbitrary commands by sending a lo...

Adobe Acrobat fails to properly convert files to PDF

Overview A vulnerability exists in Adobe Acrobat that may allow an attacker to execute arbitrary code. Description Adobe Acrobat contains a buffer overflow in the code that converts files to PDF. If an attacker can convince a user to create a PDF using specially-crafted input, that attacker may b...

CVE-2006-2382: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."...

Stack overflow

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and migh...

CVE-2006-1173

Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8to7 function for performing 8-bit to 7-bit conversion, which prevents Sendmail from delivering queued messages and migh...

FreeBSD : bogofilter -- heap corruption through malformed input (92140bc9-7bde-11da-8ec4-0002b3b60e4c)

Matthias Andree reports : When using Unicode databases default in more recent bogofilter installations, upon encountering invalid input sequences, bogofilter or bogolexer could overrun a malloc'd buffer, corrupting the heap, while converting character sets. Bogofilter would usually be processing...

FreeBSD : postgresql -- character conversion and tsearch2 vulnerabilities (486aff57-9ecd-11da-b410-000e0c2e438a)

The postgresql development team reports : The more severe of the two errors is that the functions that support client-to-server character set conversion can be called from SQL commands by unprivileged users, but these functions are not designed to be safe against malicious choices of argument...

CVE-2006-2334

The RtlDosPathNameToNtPathNameU API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or...