TCL/TK Tk工具包ReadImage()函数GIF文件解析栈溢出漏洞

BUGTRAQ ID: 27655 CVECAN ID: CVE-2008-0553 Tcl是一种简明，高效，可移植的编程语言。 在Tcl的Tk工具包中，tkImgGIF.c文件的ReadImage函数没有正确地验证从GIF图形中所读取的initialCodeSize值。如果用户受骗打开了恶意的GIF图形文件的话，就可能触发栈溢出，导致执行任意指令。 John Ousterhout Tcl 8.5.1 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1491-1）以及相应补丁: DSA-1491-1：New tk8.4 packages fix...

Fedora 8 : perl-Tk-804.028-3.fc8 (2008-1323)

Tue Feb 5 2008 Andreas Bierfert - 804.028-3 - fix 431529 gif overflow in tk see also 431518 - Fri Jan 4 2008 Andreas Bierfert - 804.028-2 - add relevant parts of debian patch - add patch for 235666 - Wed Jan 2 2008 Andreas Bierfert - 804.028-1 - version upgrade - fix 210718 SIGSEGV on exit from...

Fedora 7 : perl-Tk-804.028-3.fc7 (2008-1384)

Tue Feb 5 2008 Andreas Bierfert - 804.028-3 - fix 431529 gif overflow in tk see also 431518 - Fri Jan 4 2008 Andreas Bierfert - 804.028-2 - add relevant parts of debian patch - add patch for 235666 - Wed Jan 2 2008 Andreas Bierfert - 804.028-1 - version upgrade - fix 210718 SIGSEGV on exit from...

DEBIAN-CVE-2007-2446

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...

PT-2006-1007 · Debian +2 · Debian +2

Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux kernel-patch-openvz affected versions not specified Linux kernel versions prior to 2.6.18 Description: The issue affects the Linux kernel and may lead to disruption of confidentiality, integrity, and availability of protected...

Debian DSA-150-1 : interchange - illegal file exposition

A problem has been discovered in Interchange, an e-commerce and general HTTP database display system, which can lead to an attacker being able to read any file to which the user of the Interchange daemon has sufficient permissions, when Interchange runs in 'INET mode' internet domain socket. This...

BAZARR FAREWELL

/ traceroute local root advisory / / by: bazarr / / [email protected] / / bazarr episode / ------------------ PREFACE its me bazarr. i dont use ziplip anymore. resend any emails sent to bazarr@ziplip to [email protected] if i dident respond to them. this is a local root vulnerability in the...

[SECURITY] New version of tcpdump released

Package: tcpdump Vulnerability: remote exploit Debian-specific: no During internal source code auditing by FreeBSD several buffer overflows were found which allow an attacker to make tcpdump crash by sending carefully crafted packets to a network that is being monitored with tcpdump. This has bee...

remote_bof_cfingerd.txt

Subject: cfingerd 1.3.2 To: [email protected] Hi, there is a remote buffer over flow in cfingerd 1.3.2 in searchfake: int searchfakechar username char parsed80; bzeroparsed, 80; sscanfusername, "%^..%^\r\n\r\n", parsed; ... called from processusername, that is called from main: int mainint arg...