php5 -- Heap based buffer overflow in quoted_printable_encode

The PHP development team reports: A Heap-based buffer overflow flaw was found in the php quotedprintableencode function. A remote attacker could use this flaw to cause php to crash or execute arbirary code with the permission of the user running php...

Fedora 17 : xmp-3.4.0-11.fc17 (2013-7144)

This update fixes heap-based buffer overflow when processing certain MASI files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 18 : xmp-3.5.0-3.fc18 (2013-7135)

This update fixes heap-based buffer overflow when processing certain MASI files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : xmp-3.5.0-3.fc19 (2013-7098)

This update fixes heap-based buffer overflow when processing certain MASI files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2011-4520

PROMOTIC ActiveX heap overflow (CVE-2011-4520) affects MICROSYS PROMOTIC

CVE-2012-6558

Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the size value for a string in the resource section of a Portable Executable PE file...

CVE-2012-6558

HeavenTools PE Explorer 1.99 R6 is affected by a heap-based buffer overflow in the resource section of a Portable Executable, triggered by the size value for a string. This allows remote code execution. Documents in NVD/NVD mirrors confirm the issue but do not provide explicit exploit details or ...

CVE-2012-6553

Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote attackers to execute arbitrary code via a Portable Executable PE file with a resource section containing a string that has many tab or line feed characters...

RealNetworks RealPlayer Heap Based BoF Vulnerability (Mac OS X)

This host is installed with RealPlayer which is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerheapbasedbofvulnmacosx.nasl 6115 2017-05-12 09:03:25Z teissa $ RealNetworks RealPlayer Heap Based BoF Vulnerability Mac OS X Authors: Arun Kallavi...

RealNetworks RealPlayer Heap Based BoF Vulnerability (Windows)

This host is installed with RealPlayer which is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerheapbasedbofvulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ RealNetworks RealPlayer Heap Based BoF Vulnerability Windows Authors: Arun Kallavi Copyright:...

Mandriva Linux Security Advisory : perl (MDVSA-2013:113)

Updated perl packages fix security vulnerability : It was discovered that Perl's 'x' string repeat operator is vulnerable to a heap-based buffer overflow. An attacker could use this to execute arbitrary code CVE-2012-5195. The compile function in Maketext.pm in the Locale::Maketext implementation...

Mandriva Linux Security Advisory : snack (MDVSA-2013:126)

Updated snack packages fix security vulnerability : Two vulnerabilities have been discovered in Snack Sound Toolkit, which are caused due to missing boundary checks in the GetWavHeader function generic/jkSoundFile.c when parsing either format sub-chunks or unknown sub-chunks. This can be exploite...

Mandriva Linux Security Advisory : gimp (MDVSA-2013:082)

Updated gimp packages fix security vulnerabilities : An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's GIF image format plug-in. An attacker could create a specially crafted GIF image file that, when opened, could cause the GIF plug-in to crash or,...

Mandriva Linux Security Advisory : openjpeg (MDVSA-2013:110)

Updated openjpeg packages fix security vulnerability : An out-of heap-based buffer bounds read and write flaw, leading to invalid free, was found in the way a tile coder / decoder TCD implementation of OpenJPEG, an open source JPEG 2000 codec written in C language, performed releasing of previous...

Mandriva Linux Security Advisory : icclib (MDVSA-2013:089)

A security issue was identified and fixed in icclib : An integer overflow flaw, leading to a heap-based buffer overflow, was found in Ghostscript's International Color Consortium Format library icclib. An attacker could create a specially crafted PostScript or PDF file with embedded images that...

Mandriva Linux Security Advisory : socat (MDVSA-2013:127)

Updated socat package fixes security vulnerability : Heap-based buffer overflow in the xioscanreadline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address CVE-2012-0219. %NASLMINLEVEL 70300...

Cisco AnyConnect Secure Mobility Client 2.x / 3.x < 3.1(3103) Host Scan Multiple Vulnerabilities

The remote host has a version of Cisco AnyConnect 2.x or 3.x prior to 3.13103. It is, therefore, potentially affected by the following vulnerabilities : - A heap-based buffer overflow error exists in the file 'ciscod.exe'. CVE-2013-1173 / CSCud14143 - An unspecified error exists that could allow...

Google Picasa < 3.9 Build 3.9.14.34 Multiple Vulnerabilities (Mac OS X)

The installed version of Google Picasa is earlier than 3.9 Build 3.9.14.34. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the use of a...

Google Picasa < 3.9 Build 136.17 Multiple Vulnerabilities

The version of Google Picasa running on the remote host is earlier than 3.9 Build 136.17. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the...

CVE-2013-0913

Integer overflow in drivers/gpu/drm/i915/i915gemexecbuffer.c in the i915 driver in the Direct Rendering Manager DRM subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service heap-based buffer...