5246 matches found
GStreamer FFmpeg plugin: Heap-based buffer overflow
Background The GStreamer FFmpeg plugin uses code from the FFmpeg library to provide fast colorspace conversion and multimedia decoders to the GStreamer open source media framework. Description The GStreamer FFmpeg plugin contains derived code from the FFmpeg library, which is vulnerable to a heap...
Ubuntu 5.10 : bogofilter vulnerability (USN-240-1)
A buffer overflow was found in bogofilter's character set conversion handling. Certain invalid UTF-8 character sequences caused an invalid memory access. By sending a specially crafted email, a remote attacker could exploit this to crash bogofilter or possibly even execute arbitrary code with...
AntiWord symbolic links problem
Word to Postscript document convertation insecure temporary file creation...
USN-240-1: bogofilter vulnerability
A buffer overflow was found in bogofilter's character set conversion handling. Certain invalid UTF-8 character sequences caused an invalid memory access. By sending a specially crafted email, a remote attacker could exploit this to crash bogofilter or possibly even execute arbitrary code with...
Buffer overflow
Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service router crash or hang via unspecified vectors involving "CD to MIME Conversion"...
bogofilter SPAM filter buffer overflows
Buffer overflows on oversized words and on character sets conversion...
PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits =================================================================== PHP = 4.4.0 mysqlconnect function Local Buffer Overflow Exploit =================================================================== ?php / This exploit was designed to work...
dBpowerAMP Music Converter v11.5 and priors Local Buffer Overflow Issue
Dear Security NNOV TeAM, Original: http://secubox.shadock.net/dBpowerAMPMusicConverterv11.5LocalBufferOverflowIssue.html VULNERABLE PRODUCT ----------------------------------- Software: dBpowerAMP Music Converter Corporation: Illustrate Release: 11.5 and priors. ----------------------------------...
CVE-2005-4472
Stack-based buffer overflow in the Macromedia JRun 4 web server JWS allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters...
CVE-2005-4326
The CVE-2005-4326 entry concerns APC PowerChute Network Shutdown’s web interface, where all communication is performed in cleartext (base64-encoded). This design allows remote attackers to sniff authentication credentials. Public references confirm the issue and the metric suggests a network-base...
CVE-2005-4326
The web interface for American Power Conversion APC PowerChute Network Shutdown performs all communication in cleartext base64-encoded, which allows remote attackers to sniff authentication credentials...
DSA-878-1 netpbm-free - buffer overflow
Bulletin has no description...
bogofilter -- heap corruption through malformed input
Matthias Andree reports: When using Unicode databases default in more recent bogofilter installations, upon encountering invalid input sequences, bogofilter or bogolexer could overrun a malloc'd buffer, corrupting the heap, while converting character sets. Bogofilter would usually be processing...
netpbm security update
CentOS Errata and Security Advisory CESA-2005:743-01 Updated netpbm packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for...
security flaw
pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a 1 PBM, 2 PGM, or 3 PNM file, which allows external user-assisted attackers to execute arbitrary commands...
USN-162-1: ekg and Gadu library vulnerabilities
Marcin Owsiany and Wojtek Kaniewski discovered that some contributed scripts contrib/ekgh, contrib/ekgnv.sh, and contrib/getekg.sh in the ekg package created temporary files in an insecure way, which allowed exploitation of a race condition to create or overwrite files with the privileges of the...
fig2vect drawing format convertor buffer overflow
Buffer overflow in pdfencodestr while converting text to PDF format...
Mandrake Linux Security Advisory : postgresql (MDKSA-2005:093)
A number of vulnerabilities were found and corrected in the PostgreSQL DBMS : Two serious security errors have been found in PostgreSQL 7.3 and newer releases. These errors at least allow an unprivileged database user to crash the backend process, and may make it possible for an unprivileged user...
security flaw
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."...