Mandriva Linux Security Advisory : mozilla (MDVSA-2012:088-1)

Security issues were identified and fixed in mozilla firefox and thunderbird : Heap-based buffer overflow in the utf16toisolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2....

Mandriva Update for mozilla MDVSA-2012:088-1 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2012:088-1 mozilla Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for mozilla MDVSA-2012:088-1 (mozilla)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

XnView 1.98.8 - .tiff Image Processing Heap Overflow (1)

XnView 1.98.8 - .tiff Image Processing Heap Overflow 1 Application: XnView TIFF Image Processing Heap Overflow Platforms: Windows Secunia: SA48666 PRL: 2012-16 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2...

CVE-2012-2088

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...

RedHat Update for rsyslog RHSA-2012:0796-04

Check for the Version of rsyslog OpenVAS Vulnerability Test RedHat Update for rsyslog RHSA-2012:0796-04 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Integer overflow

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

CVE-2012-0219

CVE-2012-0219 is a heap-based buffer overflow in the xioscan_readline() function (xio-readline.c) of socat, affecting 1.4.0.0–1.7.2.0 and 2.0.0-b1–2.0.0-b4. The overflow allows local users to execute arbitrary code via the READLINE address. The connected advisories confirm this issue and show tha...

DataDirect OpenAccess oaagent.exe GIOP Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of DataDirect SequeLink. Authentication is not required to exploit this vulnerability. The specific flaw exists within how the application parses a packet that is received. When parsing a field in thi...

CVE-2012-1149

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

Fedora 17 : nut-2.6.3-4.fc17 (2012-8694)

fix heap-based buffer overflow due improper processing of non-printable characters in random network data CVE-2012-2944 - no change, just updated release number to fix upgrade path Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 16 : nut-2.6.3-4.fc16 (2012-8729)

fix heap-based buffer overflow due improper processing of non-printable characters in random network data CVE-2012-2944 - no change, just updated release number to fix upgrade path Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

CVE-2011-2911

Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...

CVE-2011-2911

Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...

Integer overflow

Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...

CVE-2011-2911

CVE-2011-2911 is a memory- safety vulnerability in the libmodplug library: an integer/heap-based overflow in CSoundFile::ReadWav (src/load_wav.cpp) before 0.8.8.4 can be triggered by a crafted WAV file, allowing remote denial of service and potentially arbitrary code execution. The issue affects ...

Fedora 16 : socat-1.7.2.1-1.fc16 (2012-8328)

Fix for CVE-2012-0219 heap-based buffer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

DSA-2487-1 openoffice.org - buffer overflow

Bulletin has no description...

CVE-2012-1947

Heap-based buffer overflow in the utf16toisolatin1 function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 allows remote attackers to execute arbitrary code via vectors that trigger a...

Apple QuickTime SVQ3 Codec mb_skip_run Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Apple...