CVE-2008-4631

Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information...

Heap overflow

GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper free call, and possibly triggering a heap-based...

Stack overflow

Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...

CVE-2008-4555

CVE-2008-4555 is a real vulnerability in Graphviz 2.20.2 (and possibly earlier) involving a stack-based buffer overflow in the push_subg function (parser.y, lib/graph/parser.c). A DOT file with a large number of Agraph_t elements can allow user‑assisted remote attackers to cause memory corruption...

CVE-2008-3647

Buffer overflow in PSNormalizer in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a PostScript file with a crafted bounding box comment...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in the ENVasicmspath parameter to 1 Association.php, 2 BigMath.php, 3 DiffieHellman.php, 4 DumbStore.php, 5 Extension.php, 6 FileStore.php, 7 HMAC.php, 8...

CVE-2008-4529

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in the ENVasicmspath parameter to 1 Association.php, 2 BigMath.php, 3 DiffieHellman.php, 4 DumbStore.php, 5 Extension.php, 6 FileStore.php, 7 HMAC.php, 8...

[security bulletin] HPSBMA02362 SSRT080044, SSRT080045, SSRT080042 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS), Execute Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01537275 Version: 2 HPSBMA02362 SSRT080044, SSRT080045, SSRT080042 rev.2 - HP OpenView Network Node Manager OV NNM, Remote Denial of Service DoS, Execute Arbitrary Code NOTICE: The information in...

CVE-2008-4470

Stack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a denial of service application crash or execute arbitrary code via an M3U playlist file that contains a long absolute pathname...

CVE-2008-4366

CVE-2008-4366 is an unrestricted file upload in the image upload component of Camera Life 2.6.2b4. According to the connected documents, remote authenticated users can upload a file with an executable extension and then access it via a direct URL under images/photos/upload, potentially executing ...

CVE-2008-4293

Affected software : Opera browser prior to 9.52 on Windows. Vulnerability : Unspecified vulnerability when Opera is registered as a protocol handler that can be triggered by other applications launching Opera, potentially causing a denial of service (crash) and possibly enabling arbitrary code ex...

CVE-2008-4061

Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via an mtd...

CVE-2008-4201

Heap-based buffer overflow in the decodeMP4file function frontend/main.c in FAAD2 2.6.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MPEG-4 MP4 file...

CVE-2008-4201

CVE-2008-4201 describes a heap-based buffer overflow in FAAD2, specifically in the decodeMP4file() function (frontend/main.c) of FAAD2 2.6.1 and earlier. The vulnerability could allow a remote attacker to crash the application or possibly execute arbitrary code by processing a crafted MPEG-4 (MP4...

Gentoo Security Advisory GLSA 200408-10 (gv)

The remote host is missing updates announced in advisory GLSA 200408-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200509-07 (X.Org)

The remote host is missing updates announced in advisory GLSA 200509-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200602-04 (xpdf poppler)

The remote host is missing updates announced in advisory GLSA 200602-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200510-15 (Lynx)

The remote host is missing updates announced in advisory GLSA 200510-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200603-05 (zoo)

The remote host is missing updates announced in advisory GLSA 200603-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200501-14 (media-sound/mpg123)

The remote host is missing updates announced in advisory GLSA 200501-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...