758 matches found
OpenJDK Serialization inconsistencies (6966692)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.227 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from...
CVE-2010-1639
The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...
Design/Logic Flaw
The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...
CVE-2010-1639
The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...
Microsoft Downplays Zero-Day IIS Issue
MS accepts there is an “inconsistency” in how IIS 6 handles semicolons in URLs, but it denies that this lends itself to hacking attacks. Read the full article. The Register...
acroread: multiple JBIG2-related security flaws
Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table...
CVE-2009-0928
Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table...
Fedora Update for e2fsprogs FEDORA-2007-4461
Check for the Version of e2fsprogs OpenVAS Vulnerability Test Fedora Update for e2fsprogs FEDORA-2007-4461 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
lcms: insufficient input validation in ReadEmbeddedTextTag
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...
CVE-2008-5316
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...
CVE-2007-5968
CVE-2007-5968 entry is a placeholder/rejected item; the reliable vulnerability information is in CVE-2007-6313. CVE-2007-6313 affects MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4, where the server does not enforce rights on the BINLOG operational entity, allowing remote authorized user...
Code injection
SlackRoll before 8 accepts gpg exit codes other than 0 and 1 as evidence of a valid signature, which allows remote Slackware mirror sites or man-in-the-middle attackers to cause a denial of service data inconsistency or possibly install Trojan horse packages via malformed gpg signatures...
CVE-2007-3499
SlackRoll before 8 accepts gpg exit codes other than 0 and 1 as evidence of a valid signature, which allows remote Slackware mirror sites or man-in-the-middle attackers to cause a denial of service data inconsistency or possibly install Trojan horse packages via malformed gpg signatures...
CVE-2007-3499
CVE-2007-3499 affects SlackRoll before 8. It incorrectly treats gpg exit codes other than 0 and 1 as evidence of a valid signature, enabling remote Slackware mirror sites or man-in-the-middle attackers to cause data inconsistency (DoS) or potentially install Trojan horse packages via malformed si...
CVE-2007-3499
SlackRoll before 8 accepts gpg exit codes other than 0 and 1 as evidence of a valid signature, which allows remote Slackware mirror sites or man-in-the-middle attackers to cause a denial of service data inconsistency or possibly install Trojan horse packages via malformed gpg signatures...
postgresql, rh security update
CentOS Errata and Security Advisory CESA-2005:433 Updated postgresql packages that fix several security vulnerabilities and risks of data loss are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...
CVE-2004-0435
Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MSINVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk...
