896 matches found
CVE-2014-3538
file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service CPU consumption via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an...
MultiPowUpload 2.1 - Remote File Upload Vulnerability
No description provided by source. Exploit Title: MultiPowUpload v 2.1 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.element-it.com Download Software : http://www.element-it.com/Download/ElementIT.MultiPowUpload3.zip Version: 2.1...
PlayPad Music Player 1.12 - (.mp3) Denial of Service Vulnerability
No description provided by source. Exploit Title: PlayPad Music Player v1.12 .mp3 File Processing BoF/Crash Date: 20th August, 2010 Author: Praveen Darshanam Software Link:...
Fat Player 0.6b - WAV File Processing Buffer Overflow (SEH)
No description provided by source. Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference:...
openSUSE Security Update : OpenOffice_org (openSUSE-SU-2011:0336-1)
Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...
openSUSE Security Update : java-1_6_0-openjdk (openSUSE-2012-136)
update to version 1.11.1 to fix several security issues : - S7082299, CVE-2011-3571: Fix in AtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687, CVE-2012-0503: Issues with TimeZone class -...
Winamp - .flv File Processing Memory Corruption
Winamp - .flv File Processing Memory Corruption source: https://www.securityfocus.com/bid/67429/info Winamp is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Winamp 5.666 is vulnerable; othe...
JVN#44392991: Security File Manager vulnerable to directory traversal
Security File Manager provided by CGENE Inc contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has...
[SECURITY] Fedora 20 Update: ruby-2.0.0.353-16.fc20
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[CORE-2013-0805] Aloaha PDF Suite Buffer Overflow Vulnerability
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Aloaha PDF Suite Buffer Overflow Vulnerability 1. Advisory Information Title: Aloaha PDF Suite Buffer Overflow Vulnerability Advisory ID: CORE-2013-0805 Advisory URL:...
Oracle Outside In vulnerable to denial-of-service (DoS)
Overview Oracle Outside In is a library to decode over 500 file types. Oracle Outside In contains a denial-of-service DoS vulnerability. Takahiro Haruyama of Internet Initiative Japan Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...
CVE-2013-2004
The 1 GetDatabase and 2 XimParseStringFile functions in X.org libX11 1.5.99.901 1.6 RC1 and earlier do not restrict the recursion depth when processing directives to include files, which allows X servers to cause a denial of service stack consumption via a crafted file...
CVE-2012-6076
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts...
CVE-2012-6076
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts...
Opera GIF File Processing Memory Corruption
...
CVE-2012-5917
SnackAmp 3.1.3 allows remote attackers to cause a denial of service application crash via a long string in an aiff file...
[SECURITY] Fedora 17 Update: ruby-1.9.3.194-17.fc17
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
Scientific Linux Security Update : firefox on SL4.x i386/x86_64
Multiple flaws were found in the processing of malformed JavaScript content. A web page containing such malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2008-2801, CVE-2008-2802, CVE-2008-2803 Several flaws were found in the...
RedHat Update for libsndfile RHSA-2011:1084-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...