1012 matches found
DSA-1048-1 asterisk - several vulnerabilities
Bulletin has no description...
CVE-2006-1834
Opera before 8.54 is affected by a vulnerability caused by an integer signedness error in the handling of long values in a stylesheet attribute, which can bypass a length check and potentially allow remote code execution. This is documented in multiple sources associated with CVE-2006-1834, inclu...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Vulnerability: Asterisk
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1827
Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...
CVE-2006-1194
Integer signedness error in the enetprotocolhandleincomingcommands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including 1 Cube, 2 Sauerbraten, and 3 Duke3dw32, allows remote attackers to cause a denial of service application crash via a packet wi...
CVE-2006-1194
The CVE-2006-1194 entry concerns an integer signedness error in the ENet library’s enet_protocol_handle_incoming_commands (protocol.c) affecting CVS-version Jul 2005 and earlier. It is used by products including Cube, Sauerbraten, and Duke3d_w32. The flaw allows a remote attacker to cause an appl...
CVE-2006-1194
Integer signedness error in the enetprotocolhandleincomingcommands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including 1 Cube, 2 Sauerbraten, and 3 Duke3dw32, allows remote attackers to cause a denial of service application crash via a packet wi...
CVE-2002-2188
OpenBSD before 3.2 is affected by a local denial-of-service in the kernel caused by getrlimit(2) with invalid arguments, likely due to an integer signedness error. The impact is a kernel crash. Mitigation provided in the references includes patches such as 018_kernresource.patch (OpenBSD 3.1 comm...
CVE-2002-2180
OpenBSD 2.0–3.1 setitimer(2) syscall contains input validation issues that allow a local user to write to kernel memory and potentially gain root privileges. The root cause is described as an argument-check problem, possibly related to an integer signedness error. Affected component: setitimer(2)...
CVE-2002-2188
OpenBSD before 3.2 allows local users to cause a denial of service kernel crash via a call to getrlimit2 with invalid arguments, possibly due to an integer signedness error...
Debian DSA-813-1 : centericq - several vulnerabilities
Several problems have been discovered in libgadu which is also part of centericq, a text-mode multi-protocol instant messenger client. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2369 Multiple integer signedness errors may allow remote attackers...
DSA-813-1 centericq - several
Bulletin has no description...
Multiple Centericq vulnerabilities
Integer signedness errors and integer overflow on different platforms...
[Full-disclosure] [SECURITY] [DSA 813-1] New centericq packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 813-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...
CVE-2005-2806
client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service application hang via an HTTP header containing only a ":" colon, possibly leading to an integer signedness error due to a missing field name or value...
CVE-2005-2806
BNBT EasyTracker (Windows BNBT EasyTracker, client.cpp) vulnerability CVE-2005-2806 affects version 7.7r3.2004.10.27 and earlier. A remote attacker can cause a denial of service (application hang) by sending an HTTP header containing only a ":". The description notes this may involve an integer s...