5353 matches found
CVE-2009-3947
CVE-2009-3947 affects Tandberg MXP Series devices (F7.0 and below) where the FTP service is vulnerable to a buffer overflow triggered by a long USER command (ending with many spaces). This can cause a remote denial of service (process crash or device reboot) and, as stated in sources, may potenti...
Buffer overflow
Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler aka libpoppler 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code v...
CVE-2009-3938
Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler aka libpoppler 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code v...
CVE-2009-3938
Poppler (libpoppler) contains a buffer overflow in ABWOutputDev::endWord in ABWOutputDev.cc, exploitable via a crafted PDF and affecting versions including 0.10.6 and 0.12.0 (used by Abiword pdftoabw). The issue could cause denial of service and may allow arbitrary code execution. The vulnerabili...
CVE-2009-3938
Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler aka libpoppler 0.10.6, 0.12.0, and possibly other versions, as used by the Abiword pdftoabw utility, allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code v...
CVE-2009-0052
CVE-2009-0052 affects the Atheros wireless driver used in Netgear WNDAP330 wireless access points with firmware 2.1.11 and other products using the Atheros AR9160-BC1A chipset. The vulnerability arises from parsing malformed (truncated) reserved management frames, allowing remote authenticated us...
CVE-2009-0052
The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service device reboot or hang and possibly execute...
CVE-2009-3932
The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service memory corruption and plugin crash or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a bad state."...
Memory corruption
The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...
Buffer overflow
Buffer overflow in FTP Server in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a CWD command specifying a pathname in a deeply nested hierarchy of directories, related to a "CWD command line tool."...
Hewlett-Packard Power Manager Administration Buffer Overflow
This module exploits a stack buffer overflow in Hewlett-Packard Power Manager 4.2. Sending a specially crafted POST request with an overly long Login string, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
Buffer overflow
Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a .rws file with a long RWS010 entry...
Information disclosure
Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information...
CVE-2009-3383
Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.4 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
CVE-2009-3377
Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unknown vectors...
Mandrake Security Advisory MDVSA-2009:287 (xpdf)
The remote host is missing an update to xpdf announced via advisory MDVSA-2009:287. OpenVAS Vulnerability Test $Id: mdksa2009287.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:287 xpdf Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
SOL3631 - Stack-based buffer overflow in Apache - CAN-2004-0488
Vulnerability description and product information: Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code by way of a client certificate with a long...
MapServer < 5.4.2 / 5.2.3 / 4.10.5 Buffer Overflow
The remote host is running MapServer, an open source Internet map server. The installed version reportedly contains an incomplete fix for the vulnerability referenced by CVE-2009-0840. An attacker may be able to exploit this issue to cause a denial of service condition or execute arbitrary code o...
CVE-2009-3790
CVE-2009-3790 describes a heap-based buffer overflow in FormMax (formerly AcroForm) evaluation 3.5, enabling remote attackers to cause a denial of service or potentially execute arbitrary code via a crafted FormMax import (.aim) file. The vulnerability details are supported by multiple sources (N...
Integer overflow
Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow. NOTE: some of the...