CVE-2011-3048

The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...

Integer overflow

Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow...

CVE-2011-5012

The CVE-2011-5012 entry describes a heap-based buffer overflow in Attachmate Reflection FTP Client (rftpcom.dll, v7.2.0.106 and possibly other versions) used in Reflection products. Under a LIST response with a long directory name, remote FTP servers could trigger arbitrary code execution. Affect...

Mandriva Update for libarchive MDVSA-2011:190 (libarchive)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for libarchive MDVSA-2011:191 (libarchive)

Check for the Version of libarchive OpenVAS Vulnerability Test Mandriva Update for libarchive MDVSA-2011:191 libarchive Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for libarchive MDVSA-2011:190 (libarchive)

Check for the Version of libarchive OpenVAS Vulnerability Test Mandriva Update for libarchive MDVSA-2011:190 libarchive Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CVE-2011-4623

Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4 allows local users to cause a denial of service daemon hang via a large file, which triggers a heap-based buffer overflow...

IrfanView - '.tiff' Image Processing Buffer Overflow

Application: IrfanView TIFF Image Processing Buffer Overflow Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47065 PRL: 2011-10 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introductio...

Mandriva Update for jasper MDVSA-2011:189 (jasper)

Check for the Version of jasper OpenVAS Vulnerability Test Mandriva Update for jasper MDVSA-2011:189 jasper Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Linux Security Advisory : jasper (MDVSA-2011:189)

Multiple vulnerabilities has been discovered and corrected in jasper : Heap-based buffer overflow in the jpccoxgetcompparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted numrlvls...

Mandriva Update for jasper MDVSA-2011:189 (jasper)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-3834

Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...

Integer overflow

Multiple integer overflows in the inavi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for 1 the number of streams or 2 the size of the RIFF INFO chunk, leading to a heap-based buffer overflow...

Mandriva Update for libxml2 MDVSA-2011:188 (libxml2)

Check for the Version of libxml2 OpenVAS Vulnerability Test Mandriva Update for libxml2 MDVSA-2011:188 libxml2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

RedHat Update for netpbm RHSA-2011:1811-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2011:188)

Multiple vulnerabilities has been discovered and corrected in libxml2 : Off-by-one error in libxml allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and application crash via a crafted website CVE-2011-0216. libxml2 allows remote attackers t...

Heap overflow

The jpccrggetparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service heap memory corruption, via a crafte...

CVE-2011-4517

CVE-2011-4517 affects JasPer 1.900.1 used for JPEG-2000 decoding. The flaw is in libjasper/jpc/jpc_cs.c: jpc_crg_getparms uses an incorrect data type during a size calculation, enabling remote attackers to trigger a heap-based buffer overflow via a crafted CRG marker segment in a JPEG2000 file. C...

CVE-2011-4517

The jpccrggetparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service heap memory corruption, via a crafte...

CVE-2011-4517

The jpccrggetparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service heap memory corruption, via a crafte...