SeaMonkey < 2.25 Multiple Vulnerabilities

Binary data 8172.prm...

Out of bounds read during WAV file decoding — Mozilla

Security researcher Atte Kettunen from OUSPG reported an out of bounds read during the decoding of WAV format audio files for playback. This could allow web content access to heap data as well as causing a crash...

Kernel: net: af_key: initialize satype in key_notify_policy_flush

The keynotifypolicyflush function in net/key/afkey.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notifypolicy interface of an IPSec keysocket...

DEBIAN-CVE-2012-6549

The isofsexportencodefh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application...

SuSe mount/umount溢出漏洞

由于mount/umount命令没有对用户的输入进行正确的边界检查，如果攻击者以超长的相对路径名为参数运行mount/umount程序，将会覆盖为realpath函数动态分配的内存空间的内容。攻击者通过修改堆heap数据有可能会获得root特权。 SuSe Linux 所有版本 Package: util 2.10f 升级util软件包，或去掉mount/umount的suid位。 ftp://ftp.suse.com/pub/suse/axp/update/6.1/a1/util-2.10f-4.alpha.rpm...

BitchX 1.1 Final - MODE Remote Heap Overflow

BitchX 1.1 Final - MODE Remote Heap Overflow !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT...

BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

Exploit for linux platform in category remote exploits ========================================================== BitchX 1.1 Final MODE Remote Heap Overflow Exploit 0-day ========================================================== !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By...

High risk vulnerability in OpenOffice RTF parser

John Heasman of NGSSoftware has discovered a high risk vulnerability in the handling of RTF documents within OpenOffice. The vulnerability affects all versions of OpenOffice prior to 2.2.1. If an attacker can coax a user into opening a specially crafted RTF document then the attacker can execute...