148 matches found
xpdf/poppler: ImageStream:: ImageStream integer overflow
Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of service application crash via a crafted PDF document that triggers a NULL...
Fedora 10 : libsilc-1.1.8-7.fc10 (2009-9356)
Fri Sep 4 2009 Stu Tomlinson 1.1.8-7 - Backport patch to fix stack corruption CVE-2008-7160 521256 - Fri Sep 4 2009 Stu Tomlinson 1.1.8-6 - Backport patch to fix additional string format vulnerabilities 515648 - Wed Aug 5 2009 Stu Tomlinson 1.1.8-5 - Backport patch to fix string format...
MP4 decoder vulnerability mining techniques-vulnerability warning-the black bar safety net
| ! --- MP4 decoder vulnerability discovery techniques For the format vulnerability is most prone to is an infinite loop, so for this vulnerability in the search method, my personal approach is person meat jokes, the attention of those that function inside the use of the cycle of operation of the...
Format string
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than...
CVE-2009-0226
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...
Stack overflow
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...
Stack overflow
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter PP4X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format,...
Format string
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than...
CVE-2009-0226
CVE-2009-0226 is a memory corruption/stack-based buffer overflow in Microsoft PowerPoint's legacy 4.0 file format handling. The vulnerability allows remote code execution when a user opens a specially crafted PowerPoint 4.0 sound-data stream, affecting PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3....
CVE-2009-0220
CVE-2009-0220 is a Microsoft PowerPoint vulnerability in the PP4X32.DLL PowerPoint 4.0 importer that caused multiple stack-based buffer overflows. The issue could allow remote code execution when a user opens a specially crafted PowerPoint 4.0 file, with two described overflow paths: an incorrect...
CVE-2009-0227
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter PP4X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format,...
CVE-2009-0227: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the PowerPoint 4.2 conversion filter PP4X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a large number of structures in sound data in a file that uses a PowerPoint 4.0 native file format,...
PDF JBIG2 NULL dereference
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service crash via a crafted PDF file that triggers a NULL pointer dereference...
Recently hung it to the trend is hanging on the gif? - Vulnerability warning-the black bar safety net
The recent discovery of several hung it to the station, the horse hanging in the picture. gif file format for pictures, later added these The code can still be displayed properly. “ 腜 ? Saw 7? Aberdeen? D shoes ;reference ;iframe src=http://127.0.0.1/m.htm width=0 height=0/iframe” Using 1 6 hex...
IBM ISS: Adobe JBIG2 exploits being spammed out
PDFs containing exploits for the recent 0-day vulnerability in Acrobat Reader are now being actively sent out through spambots. The folks at the IBM ISS X-Force say they’re seeing infected PDFs being spammed out and that it looks like the traffic is mainly coming from Taiwan, though those may be...
CentOS Update for libvorbis CESA-2008:0270 centos3 x86_64
Check for the Version of libvorbis OpenVAS Vulnerability Test CentOS Update for libvorbis CESA-2008:0270 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
F-Secure多个杀毒产品LHA及RAR文档绕过安全扫描漏洞
F-Secure Internet Gatekeeper和F-Secure Anti-Virus都是芬兰的一家杀毒软件厂商所发布的杀毒产品。 F-Secure的这些防病病毒工具处理畸形LHA和RAR文档时存在漏洞，远程攻击者可能利用此漏洞绕过扫描检测。 如果LHA和RAR文件设置了畸形的文档文件头的话，这些文件就可能绕过F-Secure产品的杀毒扫描，导致在用户系统上执行非授权操作。 F-Secure Anti-Virus for Workstations 7.00 F-Secure Anti-Virus for Windows Servers 7.00 F-Secure...
CVE-2007-2452
Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...
CVE-2007-1117
Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format vulnerability." NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory...