OpenOffice.Org: Integer truncation error by parsing specially-crafted Microsoft PowerPoint document

simpress.bin in the Impress module in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PowerPoi...

Integer overflow

Integer underflow in the SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted size for an unspecified record typ...

CVE-2010-2206

CVE-2010-2206 affects Adobe Reader and Acrobat on Windows and macOS. An array index error in AcroForm.api is triggered by a crafted GIF image embedded in a PDF, bypassing a size check and causing a heap-based buffer overflow. This enables remote code execution. Affected products are Acrobat/Reade...

texlive: Integer overflow by processing special commands

Integer overflow in the predospecial function in dospecial.c in dvips in 1 TeX Live and 2 teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party...

Adobe Reader CFF Heap-Based Overflow (APSB10-09; CVE-2010-1241)

Portable Document Format PDF is an open file format created by Adobe Systems. A heap-based overflow vulnerability has been reported in Adobe Reader. The vulnerability is due to the way Adobe Reader and Acrobat parse a malformed PDF file. A remote attacker could trigger this issue via a specially...

OpenJDK ImagingLib arbitrary code execution vulnerability (6914866)

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

JDK unspecified vulnerability in ImageIO component

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

Mozilla Thunderbird < 2.0.0.24 Multiple Vulnerabilities

Binary data 801216.prm...

Mozilla SeaMonkey < 1.1.19 Multiple Vulnerabilities

Binary data 801348.prm...

openSUSE Security Update : fetchmail (fetchmail-1996)

This update fixes a heap-based overflow in fetchmail's sdump function. It can be exploited while displaying detailed X.509 certification information to cause a crash or to probably execute arbitrary code too. CVE-2010-0562: CVSS v2 Base Score: 4.0 low AV:N/AC:H/Au:N/C:N/I:P/A:P: Buffer Errors...

CVE-2010-0010

Integer overflow in the approxysendfb function in proxy/proxyutil.c in modproxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service daemon crash or possibly execute arbitrary code via a large chunk size that triggers a heap-based...

openSUSE Security Update : libpoppler-devel (libpoppler-devel-1740)

This update of libpoppler3 fixes various security issues. CVE-2009-0791: Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-3607: Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows...

Mandriva Security Advisory MDVSA-2009:319 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:319. OpenVAS Vulnerability Test $Id: mdksa2009319.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:319 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:319)

Vulnerabilities have been discovered and corrected in xine-lib : Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

CVE-2009-3296

Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows...

CVE-2009-2527

CVE-2009-2527 describes a remote code execution vulnerability in Windows Media Player 6.4 caused by improper handling of specially crafted ASF files or streaming content. The heap-based buffer overflow could allow an attacker to take complete control of an affected system when a user opens a craf...

PT-2009-5753

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 7.x through 7.1.3 Adobe Reader and Acrobat versions 8.x through 8.1.6 Adobe Reader and Acrobat versions 9.x through 9.1 Description A heap-based buffer overflow allows remote attackers to execute arbitrary cod...

Microsoft Remote Desktop Connection Client Heap Based Buffer Overflow Vulnerability

Description Microsoft Remote Desktop Connection client is prone to a heap-based buffer-overflow vulnerability when processing certain parameters returned by a malicious RDP Remote Desktop Protocol server. Successfully exploiting this issue would allow an attacker to corrupt heap memory and execut...

Mandrake Security Advisory MDVSA-2009:095 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory MDVSA-2009:095. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...