Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the InterJoomla ArtForms comartforms component 2.1b7 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 imgcaptcha.php or 2 mp3captcha.php in...

CVE-2009-1810

Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via 1 the formUser parameter aka the Name field to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to 2...

CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

AOL Radio AmpX ActiveX Control ConvertFile() Buffer Overflow

This module exploits a stack-based buffer overflow in AOL IWinAmpActiveX class AmpX.dll version 2.4.0.6 installed via AOL Radio website. By setting an overly long value to 'ConvertFile', an attacker can overrun a buffer and execute arbitrary code. This module requires Metasploit:...

CVE-2009-1759

Stack-based buffer overflow in the btFiles::BuildFromMI function trunk/btfiles.cpp in Enhanced CTorrent aka dTorrent 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Torrent file containing a long...

CVE-2009-1759

Stack-based buffer overflow in the btFiles::BuildFromMI function trunk/btfiles.cpp in Enhanced CTorrent aka dTorrent 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Torrent file containing a long...

Stack overflow

Stack-based buffer overflow in the btFiles::BuildFromMI function trunk/btfiles.cpp in Enhanced CTorrent aka dTorrent 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Torrent file containing a long...

CVE-2009-1759

Stack-based buffer overflow in the btFiles::BuildFromMI function trunk/btfiles.cpp in Enhanced CTorrent aka dTorrent 3.3.2 and probably earlier, and CTorrent 1.3.4, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Torrent file containing a long...

CVE-2009-1736

The CVE-2009-1736 issue affects Joomla! GridSupport (GS) Ticket System (com_gsticketsystem). The underlying vulnerability is an SQL injection in the viewCategory action, where the catid parameter to index.php can be manipulated to execute arbitrary SQL commands. The documents confirm remote‑level...

Cscope < 15.7a Multiple Buffer Overflow Vulnerabilities

This host has installed Cscope and is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cscope putstring Multiple Buffer Overflow vulnerability

This host has installed Cscope and is prone to Multiple Buffer Overflow vulnerability OpenVAS Vulnerability Test $Id: gbcscopeputstringmultbofvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Cscope putstring Multiple Buffer Overflow vulnerability. Authors: Antu Sanadi Copyright: Copyright c 2009...

Command injection

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2009-1605

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdffunction.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from thir...

Debian: Security Advisory (DSA-1796-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : python-crypto (python-crypto-6063)

Missing checks for the key length in the ARC2 module potentially allowed attackers to crash applications using python-crypto or potentially even cause execute arbitrary code CVE-2009-0544. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Debian DSA-1793-1 : kdegraphics - multiple vulnerabilities

kpdf, a Portable Document Format PDF viewer for KDE, is based on the xpdf program and thus suffers from similar flaws to those described in DSA-1790. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0146 Multiple buffer overflows in the JBIG2 decoder...

[SECURITY] [DSA 1796-1] New libwmf packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1796-1 [email protected] http://www.debian.org/security/ Nico Golde April 7th, 2009 http://www.debian.org/security/faq -...

Debian DSA-1790-1 : xpdf - multiple vulnerabilities

Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format PDF files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0146 Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2...

HP-UX Update for X Font Server (xfs) Software HPSBUX02303

Check for the Version of X Font Server xfs Software OpenVAS Vulnerability Test HP-UX Update for X Font Server xfs Software HPSBUX02303 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...