Lucene search
K

4732 matches found

CVE
CVE
added 2007/08/03 10:0 a.m.51 views

CVE-2007-2405

CVE-2007-2405 describes an integer underflow in Preview (PDFKit) on Mac OS X 10.4.10 that can be triggered by a crafted PDF file to achieve remote code execution. The affected component is Preview/PDFKit in Mac OS X’s PDF handling. The CVSS metrics indicate network access, no authentication, and ...

6.8CVSS7.2AI score0.01214EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2007/08/03 10:0 a.m.21 views

CVE-2007-2405

Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file...

7.2AI score0.01214EPSS
Exploits1References6
Cvelist
Cvelist
added 2007/07/12 12:0 a.m.21 views

CVE-2006-5271

Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption...

7.6AI score0.12635EPSS
Exploits0References8
CERT
CERT
added 2007/06/14 12:0 a.m.29 views

Microsoft Windows Secure Channel integer underflow

Overview A vulnerability in Microsoft Windows Secure Channel security package may lead to execution of arbitrary code. Description Microsoft Windows Secure Channel Schannel security package implements standard network authentication protocols Secure Sockets Layer SSL and Transport Layer Security...

9.3CVSS6.1AI score0.52005EPSS
Exploits0References3
NVD
NVD
added 2007/06/11 10:30 p.m.16 views

CVE-2007-2875

Integer underflow in the cpusettasksread function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file...

2.1CVSS5.7AI score0.00097EPSS
Exploits0References23
UbuntuCve
UbuntuCve
added 2007/06/11 10:30 p.m.31 views

CVE-2007-2875

Integer underflow in the cpusettasksread function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file...

2.1CVSS5.9AI score0.00097EPSS
Exploits0References4
Cvelist
Cvelist
added 2007/06/11 10:0 p.m.29 views

CVE-2007-2875

Integer underflow in the cpusettasksread function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file...

5.5AI score0.00097EPSS
Exploits0References23
CVE
CVE
added 2007/06/11 10:0 p.m.84 views

CVE-2007-2875

CVE-2007-2875 concerns an Integer underflow in cpuset_tasks_read of the Linux kernel when the cpuset filesystem is mounted. The issue affects kernels prior to 2.6.20.13 and 2.6.21.x prior to 2.6.21.4, allowing a local attacker to read kernel memory contents by supplying a large offset while readi...

2.1CVSS5.5AI score0.00097EPSS
Exploits0References23Affected Software1
securityvulns
securityvulns
added 2007/06/11 12:0 a.m.65 views

iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability

Linux Kernel cpuset tasks Information Disclosure Vulnerability iDefense Security Advisory 06.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 07, 2007 I. BACKGROUND Linux is a clone of the UNIX operating system, written from scratch by Linus Torvalds with assistance from a...

2.1CVSS5.4AI score0.00097EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/06/01 12:0 a.m.34 views

CentOS 4 / 5 : file (CESA-2007:0391)

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

9.3CVSS7.7AI score0.41927EPSS
Exploits2References6
Tenable Nessus
Tenable Nessus
added 2007/06/01 12:0 a.m.31 views

RHEL 4 / 5 : file (RHSA-2007:0391)

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

9.3CVSS7.7AI score0.41927EPSS
Exploits2References3
Cent OS
Cent OS
added 2007/05/30 6:29 p.m.63 views

file security update

CentOS Errata and Security Advisory CESA-2007:0391 An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a...

9.3CVSS7.3AI score0.41927EPSS
Exploits2References8
RedHat Linux
RedHat Linux
added 2007/05/30 9:42 a.m.28 views

Moderate: Red Hat Security Advisory: file security update

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

9.3CVSS7.3AI score0.41927EPSS
Exploits2References4
Check Point Advisories
Check Point Advisories
added 2007/05/17 12:0 a.m.1 views

Apple QuickTime Crafted Media File FlipFileTypeAtom_BtoN Integer Underflow (CVE-2007-2296)

MP4 is the official filename extension for MPEG-4 Part 14 files.These files are generally used to store digital audio and digital video streams.A vulnerability has been reported in Apple QuickTime. A remote attacker could trigger this vulnerability via a specially crafted MP4 file. Successful...

9.3CVSS6.7AI score0.28604EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2007/04/10 12:0 a.m.36 views

Debian DSA-1274-1 : file - buffer overflow

An integer underflow bug has been found in the fileprintf function in file, a tool to determine file types based analysis of file content. The bug could allow an attacker to execute arbitrary code by inducing a local user to examine a specially crafted file that triggers a buffer overflow...

9.3CVSS8.2AI score0.41927EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2007/04/05 12:0 a.m.29 views

GLSA-200703-26 : file: Integer underflow

The remote host is affected by the vulnerability described in GLSA-200703-26 file: Integer underflow Jean-Sebastien Guay-Leroux reported an integer underflow in fileprintf function. Impact : A remote attacker could entice a user to run the 'file' program on a specially crafted file that would...

9.3CVSS8.5AI score0.41927EPSS
Exploits1References2
Debian
Debian
added 2007/04/02 12:10 p.m.30 views

[SECURITY] [DSA 1274-1] New file packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1274-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : file Vulnerability :...

9.3CVSS0.3AI score0.41927EPSS
Exploits1
OSV
OSV
added 2007/04/02 12:0 a.m.10 views

DSA-1274-1 file - buffer overflow

Bulletin has no description...

9.3CVSS6.3AI score0.41927EPSS
Exploits1
Gentoo Linux
Gentoo Linux
added 2007/03/30 12:0 a.m.41 views

file: Integer underflow

Background file is a utility that guesses a file format by scanning binary data for patterns. Description Jean-Sebastien Guay-Leroux reported an integer underflow in fileprintf function. Impact A remote attacker could entice a user to run the "file" program on a specially crafted file that would...

9.3CVSS9.7AI score0.41927EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2007/03/26 12:0 a.m.24 views

RHEL 4 / 5 : file (RHSA-2007:0124)

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

9.3CVSS7.7AI score0.41927EPSS
Exploits1References3
Rows per page
Query Builder