CVE-2007-1536

Integer underflow in the fileprintf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow...

Design/Logic Flaw

Integer underflow in the fileprintf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow...

CVE-2007-1536

Integer underflow in the fileprintf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow...

CVE-2007-1536

Integer underflow in the fileprintf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow...

CVE-2007-1536

The CVE-2007-1536 issue is an integer underflow in the file_printf() function of the file(1) utility (used by The Sleuth Kit). This can cause a heap-based buffer overflow when processing crafted files, potentially allowing arbitrary code execution with the invoked user’s privileges. Public adviso...

CVE-2007-1536

Integer underflow in the fileprintf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow...

File(1) 4.13 - Command File_PrintF Integer Underflow

File1 4.13 - Command FilePrintF Integer Underflow // source: https://www.securityfocus.com/bid/23021/info The file1 command is prone to an integer-underflow vulnerability because the command fails to adequately handle user-supplied data. An attacker can leverage this issue to corrupt heap memory...

File(1) 4.13 - Command File_PrintF Integer Underflow

// source: https://www.securityfocus.com/bid/23021/info The file1 command is prone to an integer-underflow vulnerability because the command fails to adequately handle user-supplied data. An attacker can leverage this issue to corrupt heap memory and execute arbitrary code with the privileges of ...

NSS: SSLv2 protocol buffer overflows

Integer underflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to...

tcpdump - Print-bgp.C Remote Integer Underflow

tcpdump - Print-bgp.C Remote Integer Underflow // source: https://www.securityfocus.com/bid/24965/info The 'tcpdump' utility is prone to an integer-underflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. An attacke...

tcpdump - Print-bgp.C Remote Integer Underflow

// source: https://www.securityfocus.com/bid/24965/info The 'tcpdump' utility is prone to an integer-underflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary...

Heap overflow

Integer underflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to...

CVE-2007-0008

CVE-2007-0008 is an NSS heap-based overflow caused by an integer underflow when processing an SSLv2 server message with a key too short to encrypt the Master Secret. It affects SeaMonkey, Firefox, and Thunderbird around NSS usage and was addressed by updating to fixed NSS-containing packages (e.g...

iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability

Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability iDefense Security Advisory 02.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 23, 2007 I. BACKGROUND Network Security Services NSS is a set of libraries designed to support cross-platform development o...

iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability

Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability iDefense Security Advisory 02.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 23, 2007 I. BACKGROUND Network Security Services NSS is a set of libraries designed to support cross-platform development o...

xmms -- Integer Overflow And Underflow Vulnerabilities

Secunia reports: Secunia Research has discovered two vulnerabilities in XMMS, which can be exploited by malicious people to compromise a user's system. 1 An integer underflow error exists in the processing of skin bitmap images. This can be exploited to cause a stack-based buffer overflow via...

CVE-2007-0251

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files...

CVE-2007-0251

Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files...

CVE-2007-0251

CVE-2007-0251 affects Snort 2.6.1.2, where an integer underflow in DecodeGRE (src/decode.c) can cause dereferencing of certain memory locations when processing crafted GRE packets. This may lead to log file corruption or leakage of sensitive information into logs. Connected sources confirm the vu...

CVE-2007-0251

Removed by vendor...