CVE-2012-6558

HeavenTools PE Explorer 1.99 R6 is affected by a heap-based buffer overflow in the resource section of a Portable Executable, triggered by the size value for a string. This allows remote code execution. Documents in NVD/NVD mirrors confirm the issue but do not provide explicit exploit details or ...

CVE-2012-6553

Heap-based buffer overflow in Resource Hacker 3.6.0.92 allows remote attackers to execute arbitrary code via a Portable Executable PE file with a resource section containing a string that has many tab or line feed characters...

RealNetworks RealPlayer Heap Based BoF Vulnerability (Mac OS X)

This host is installed with RealPlayer which is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerheapbasedbofvulnmacosx.nasl 6115 2017-05-12 09:03:25Z teissa $ RealNetworks RealPlayer Heap Based BoF Vulnerability Mac OS X Authors: Arun Kallavi...

RealNetworks RealPlayer Heap Based BoF Vulnerability (Windows)

This host is installed with RealPlayer which is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayerheapbasedbofvulnwin.nasl 6074 2017-05-05 09:03:14Z teissa $ RealNetworks RealPlayer Heap Based BoF Vulnerability Windows Authors: Arun Kallavi Copyright:...

Mandriva Linux Security Advisory : snack (MDVSA-2013:126)

Updated snack packages fix security vulnerability : Two vulnerabilities have been discovered in Snack Sound Toolkit, which are caused due to missing boundary checks in the GetWavHeader function generic/jkSoundFile.c when parsing either format sub-chunks or unknown sub-chunks. This can be exploite...

Mandriva Linux Security Advisory : gimp (MDVSA-2013:082)

Updated gimp packages fix security vulnerabilities : An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's GIF image format plug-in. An attacker could create a specially crafted GIF image file that, when opened, could cause the GIF plug-in to crash or,...

Mandriva Linux Security Advisory : perl (MDVSA-2013:113)

Updated perl packages fix security vulnerability : It was discovered that Perl's 'x' string repeat operator is vulnerable to a heap-based buffer overflow. An attacker could use this to execute arbitrary code CVE-2012-5195. The compile function in Maketext.pm in the Locale::Maketext implementation...

Mandriva Linux Security Advisory : openjpeg (MDVSA-2013:110)

Updated openjpeg packages fix security vulnerability : An out-of heap-based buffer bounds read and write flaw, leading to invalid free, was found in the way a tile coder / decoder TCD implementation of OpenJPEG, an open source JPEG 2000 codec written in C language, performed releasing of previous...

Mandriva Linux Security Advisory : icclib (MDVSA-2013:089)

A security issue was identified and fixed in icclib : An integer overflow flaw, leading to a heap-based buffer overflow, was found in Ghostscript's International Color Consortium Format library icclib. An attacker could create a specially crafted PostScript or PDF file with embedded images that...

Mandriva Linux Security Advisory : socat (MDVSA-2013:127)

Updated socat package fixes security vulnerability : Heap-based buffer overflow in the xioscanreadline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address CVE-2012-0219. %NASLMINLEVEL 70300...

Cisco AnyConnect Secure Mobility Client 2.x / 3.x < 3.1(3103) Host Scan Multiple Vulnerabilities

The remote host has a version of Cisco AnyConnect 2.x or 3.x prior to 3.13103. It is, therefore, potentially affected by the following vulnerabilities : - A heap-based buffer overflow error exists in the file 'ciscod.exe'. CVE-2013-1173 / CSCud14143 - An unspecified error exists that could allow...

Google Picasa < 3.9 Build 136.17 Multiple Vulnerabilities

The version of Google Picasa running on the remote host is earlier than 3.9 Build 136.17. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the...

Google Picasa < 3.9 Build 3.9.14.34 Multiple Vulnerabilities (Mac OS X)

The installed version of Google Picasa is earlier than 3.9 Build 3.9.14.34. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the use of a...

CVE-2013-0913

Integer overflow in drivers/gpu/drm/i915/i915gemexecbuffer.c in the i915 driver in the Direct Rendering Manager DRM subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service heap-based buffer...

CVE-2013-0913

CVE-2013-0913 affects the i915 DRM driver in the Linux kernel up to version 3.8.3. The vulnerability is an integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c, which can be triggered by a crafted relocation-copy sequence and may lead to a heap-based buffer overflow, potentially enablin...

CVE-2013-1795

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service crash via a large list from the IdToName RPC, which triggers a heap-based buffer overflow...

CVE-2013-1795

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service crash via a large list from the IdToName RPC, which triggers a heap-based buffer overflow...

CVE-2013-1795

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service crash via a large list from the IdToName RPC, which triggers a heap-based buffer overflow...

Integer overflow

Integer overflow in ptserver in OpenAFS before 1.6.2 allows remote attackers to cause a denial of service crash via a large list from the IdToName RPC, which triggers a heap-based buffer overflow...

CVE-2013-1375

CVE-2013-1375 describes a heap-based buffer overflow in Adobe Flash Player prior to certain 10.3/11.x revisions and Adobe AIR prior to 3.6.0.6090, allowing arbitrary code execution via unspecified vectors. The initial entry lists affected platforms (Windows, macOS, Linux, Android) and correspondi...