2609 matches found
CVE-2007-6416
The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...
Design/Logic Flaw
The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...
CVE-2007-6416
CVE-2007-6416 affects Xen 3.1.2 and earlier on ia64, where the copy_to_user routine in the PAL emulation can let a local HVM guest read arbitrary host memory. Exploitation details are not provided in the initial document, but this is listed as a host memory exposure issue (NVD CVSSv2 base 4.6, ME...
CVE-2007-6416
The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...
CVE-2007-6416: Undefined Security Weakness
The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...
GLSA-200712-08 : AMD64 x86 emulation Qt library: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200712-08 AMD64 x86 emulation Qt library: Multiple vulnerabilities The Qt versions used by the AMD64 x86 emulation Qt libraries were vulnerable to several flaws GLSA 200708-16, GLSA 200710-28 Impact : An attacker could trigger one...
AMD64 x86 emulation Qt library: Multiple vulnerabilities
Background Qt is a cross-platform GUI framework, which is used e.g. by KDE. The AMD64 x86 emulation Qt library packages Qt libraries for 32bit x86 emulation on AMD64. Description The Qt versions used by the AMD64 x86 emulation Qt libraries were vulnerable to several flaws GLSA 200708-16, GLSA...
Cygwin Windows POSIX emulation libraries buffer overflow
Buffer overflow on oversized filename...
Mandrake Linux Security Advisory : kernel (MDKSA-2007:195)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : A stack-based buffer overflow in the random number generator could allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater than the output pool si...
openSUSE 10 Security Update : kernel (kernel-4487)
This kernel update fixes the following security problems : - CVE-2007-3105: Stack-based buffer overflow in the random number generator RNG implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wake-up...
openSUSE 10 Security Update : kernel (kernel-4503)
This kernel update fixes the following security problems : - CVE-2007-4571: An information disclosure vulnerability in the ALSA driver can be exploited by local users to read sensitive data from the kernel memory. - CVE-2007-4573: It was possible for local user to become root by exploitable a bug...
CentOS 4 : kernel (CESA-2007:0937)
Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...
Linux Kernel 2.4/2.6 x86-64 System Call Emulation Exploit
No description provided by source. / exploit for x8664 linux kernel ia32syscall emulation bug, discovered by Wojciech Purczynski cliphatisec.pl by Robert Swiecki robertatswiecki.net Przemyslaw Frasunek venglinatfreebsd.lublin.pl Pawel Pisarczyk pawelatimmos.com.pl of ATM-Lab http://www.atm-lab.pl...
linux-syscall.txt
/ exploit for x8664 linux kernel ia32syscall emulation bug, discovered by Wojciech Purczynski by Robert Swiecki Przemyslaw Frasunek Pawel Pisarczyk of ATM-Lab http://www.atm-lab.pl / include include include include include include include include include uint32t uid, euid, suid; static void...
x86_64 syscall vulnerability
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x8664 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds...
Linux Kernel 2.4/2.6 x86-64 System Call Emulation Exploit
Exploit for linux platform in category local exploits ========================================================= Linux Kernel 2.4/2.6 x86-64 System Call Emulation Exploit ========================================================= / exploit for x8664 linux kernel ia32syscall emulation bug, discovere...
Linux Kernel 2.42.6 (x86-64) - System Call Emulation Privilege Escalation
Linux Kernel 2.42.6 x86-64 - System Call Emulation Privilege Escalation / exploit for x8664 linux kernel ia32syscall emulation bug, discovered by Wojciech Purczynski by Robert Swiecki Przemyslaw Frasunek Pawel Pisarczyk of ATM-Lab http://www.atm-lab.pl / include include include include include...
Linux Kernel 2.4/2.6 (x86-64) - System Call Emulation Privilege Escalation
/ exploit for x8664 linux kernel ia32syscall emulation bug, discovered by Wojciech Purczynski by Robert Swiecki Przemyslaw Frasunek Pawel Pisarczyk of ATM-Lab http://www.atm-lab.pl / include include include include include include include include include uint32t uid, euid, suid; static void...
COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability
=== ABSTRACT ========================================================= Insufficient validation of general-purpose register in IA32 system call emulation code may lead to local system compromise on x8664 platform. === AFFECTED SOFTWARE ================================================ Linux 2.6 Lin...