91 matches found
CVE-2015-6823
The allocatebuffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service segmentation violation or possibly have unspecified other impact via crafted Apple Lossless Audio Codec ALAC data...
MGASA-2013-0300 Updated vino packages fix CVE-2013-5745
Updated vino package fixes security vulnerability: The vinoserverclientdatapending function in vino-server.c in GNOME Vino 3.7.3 and earlier, when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote...
Opera < 7.54u1 Download Box Spoofing
Binary data 2467.prm...
Konqueror < 3.2.2-2 Cross-Domain Dialog Box Spoofing
Binary data 2374.prm...
sendmessage.cgi Multiple Vulnerabilities
Binary data 1679.prm...
Subversion (SVN) < 1.0.6 Module File Restriction Bypass (deprecated)
Binary data 1964.prm...
Gaim < 0.82 Multiple Overflows
Binary data 2159.prm...
Oracle MySQL Mysqlhotcopy Script Insecure Temporary File Creation
Binary data 2129.prm...
Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection
Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection source: https://www.securityfocus.com/bid/8212/info Ultimate Bulletin Board has been reported prone to a HTML injection vulnerability. The issue likely presents itself due to a lack of sanitization performed on cookie data. It has been...
Gkrellmd 2.1 - Remote Buffer Overflow (1)
Gkrellmd 2.1 - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/8022/info GKrellMd has been reported prone to a remote buffer overflow vulnerability, arbitrary code execution is possible. The issue presents itself due to a lack of sufficient bounds checking performed on...
CVE-2002-0059
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once a "double free", which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data...