678 matches found
AIX 5.3 TL 11 : bos.net.nfs.client (U832850)
The remote host is missing AIX PTF U832850, which is related to the security of the package bos.net.nfs.client. An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication servic...
CVE-2010-1620
Integer overflow in the loadiface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a 1 file or 2 socket that provides configuration data with many entries, leading to a heap-based buffer overflow...
Adobe Acrobat Bundled LibTIFF Integer Overflow
$Id: adobelibtiff.rb 8833 2010-03-16 18:06:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Sun Java Runtime Environment Type1 Font Parsing Integer Overflow (CVE-2009-1099)
Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...
iDefense Security Advisory 02.01.10: RealNetworks RealPlayer CMediumBlockAllocator Integer Overflow Vulnerability
iDefense Security Advisory 02.01.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 01, 2010 I. BACKGROUND RealPlayer is an application for playing various media formats, developed by RealNetworks Inc. Since late 2003, Real Player has been based on the open-source Helix Player. More...
Mandriva Security Advisory MDVSA-2009:296-1 (gimp)
The remote host is missing an update to gimp announced via advisory MDVSA-2009:296-1. OpenVAS Vulnerability Test $Id: mdksa20092961.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:296-1 gimp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
CVE-2009-3608
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based...
CVE-2009-2980
Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...
Security fix for the ALT Linux 5 package poppler5 version 0.12.1-alt1
Oct. 19, 2009 Sergey V Turchin 0.12.1-alt1 - new version - add linker version script for libpoppler - security fixes: - CVE-2009-3608 ObjectStream integer overflow...
Integer overflow
Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, ...
CVE-2009-2412
Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...
Adobe Flash Player 10.0.22 / AIR - 'intf_count' Integer Overflow
source: https://www.securityfocus.com/bid/35907/info Adobe Flash Player and Adobe AIR are prone to an integer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition. This issue wa...
Dillo Png_datainfo_callback()函数整数溢出漏洞
BUGTRAQ ID: 35575 CVECAN ID: CVE-2009-2294 Dillo是运行在Unix平台上的轻量级浏览器。 Dillo的Pngdatainfocallback函数在解析内嵌了PNG图形的HTML页面时存在可最终导致堆溢出的整数溢出漏洞。如果攻击者在PNG图形中指定了超长的宽度和高度值,打开该图形就可以触发这个溢出,导致执行任意代码。 Dillo Project Dillo = 2.1 厂商补丁: Dillo Project ------------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
CVE-2009-1194
Integer overflow in the pangoglyphstringsetsize function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer overflow, as...
Microsoft GDIPlus Library File Integer Overflow Vulnerability
This host is having GDIPlus Library and is prone to Integer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbgdiplusintoverflowvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Microsoft GDIPlus Library File Integer Overflow Vulnerability Authors: Sujit Ghosal Copyright c 2009 Greenbone Networks...
CVE-2009-0587
Multiple integer overflows in Evolution Data Server aka evolution-data-server before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in 1 addressbook/libebook/e-vcard.c in evc or 2 camel/camel-mime-utils.c in libcam...
F-Secure Product(s) Integer Overflow Vulnerability (Linux)
This host is installed with F-Secure Products and is prone to Integer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfsecureprdtsintoverflowvulnlin.nasl 6516 2017-07-04 12:20:47Z cfischer $ F-Secure Products Integer Overflow Vulnerability Linux Authors: Sharath S Copyright: Copyright c...
TightVNC ClientConnection Multiple Integer Overflow Vulnerabilities (Linux)
This host is running TightVNC and is prone to Multiple Integer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodtightvncmultintoverflowvulnlin.nasl 5148 2017-01-31 13:16:55Z teissa $ TightVNC ClientConnection Multiple Integer Overflow Vulnerabilities Linux Authors: Sujit Ghosal...
CentOS Update for python-docs CESA-2007:1076 centos3 x86_64
Check for the Version of python-docs OpenVAS Vulnerability Test CentOS Update for python-docs CESA-2007:1076 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
[SECURITY] [DSA 1713-1] New rt2500 packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1713-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2009 http://www.debian.org/security/faq -...