Lucene search
K

3104 matches found

UbuntuCve
UbuntuCve
added 2008/10/31 12:0 a.m.27 views

CVE-2008-4864

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different...

7.5CVSS6.7AI score0.10929EPSS
Exploits6References3
UbuntuCve
UbuntuCve
added 2008/10/30 8:0 p.m.30 views

CVE-2008-2238

Multiple integer overflows in OpenOffice.org OOo 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow...

9.3CVSS6.5AI score0.08775EPSS
Exploits1References2
CVE
CVE
added 2008/10/30 7:19 p.m.66 views

CVE-2008-2238

CVE-2008-2238 concerns multiple integer overflows in OpenOffice.org 2.x (EMF/EMR parsing) that can trigger a heap-based buffer overflow, potentially allowing remote code execution via crafted EMF files embedded in StarOffice/StarSuite documents. The connected Nessus advisories (ELSA-2008-0939 and...

9.3CVSS7.8AI score0.08775EPSS
Exploits1References27Affected Software1
Cvelist
Cvelist
added 2008/10/30 7:19 p.m.18 views

CVE-2008-2238

Multiple integer overflows in OpenOffice.org OOo 2.x before 2.4.2 allow remote attackers to execute arbitrary code via crafted EMR records in an EMF file associated with a StarOffice/StarSuite document, which trigger a heap-based buffer overflow...

7.8AI score0.08775EPSS
Exploits1References27
NVD
NVD
added 2008/10/22 6:0 p.m.19 views

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

9.3CVSS7.3AI score0.08258EPSS
Exploits7References5
OSV
OSV
added 2008/10/22 6:0 p.m.1 views

DEBIAN-CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

9.3CVSS7.9AI score0.08258EPSS
Exploits7References1
UbuntuCve
UbuntuCve
added 2008/10/22 6:0 p.m.16 views

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

9.3CVSS6.2AI score0.08258EPSS
Exploits7References2
Cvelist
Cvelist
added 2008/10/22 5:0 p.m.21 views

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

7.2AI score0.08258EPSS
Exploits7References5
Debian CVE
Debian CVE
added 2008/10/22 5:0 p.m.27 views

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

9.3CVSS7.8AI score0.08258EPSS
Exploits7
CVE
CVE
added 2008/10/22 5:0 p.m.67 views

CVE-2008-4686

CVE-2008-4686 affects VideoLAN VLC Media Player, describing multiple integer overflows in the TY demux plugin (ty.c) of the TiVo demuxer. The vulnerability could allow remote attackers to execute arbitrary code via a crafted .ty file, likely affecting VLC 0.9.0 through 0.9.4; this is a distinct i...

9.3CVSS7.2AI score0.08258EPSS
Exploits7References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2008/10/16 12:0 a.m.28 views

Fedora 8 : cups-1.3.9-1.fc8 (2008-8801)

Security release. This updates to 1.3.9 and fixes three integer overflows in the CUPS text and image filters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

10CVSS6.5AI score0.51274EPSS
Exploits1References7
NVD
NVD
added 2008/10/15 12:12 a.m.19 views

CVE-2008-3477

Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to...

9.3CVSS7.5AI score0.71275EPSS
Exploits1References11
CVE
CVE
added 2008/10/15 12:0 a.m.63 views

CVE-2008-3477

CVE-2008-3477 affects Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2/SP3, in which the VBA Performance Cache handling of embedded objects can be abused to execute arbitrary code. The root cause is from heap-based and other memory corruptions (overflow/invalid indexing) when processing an object...

9.3CVSS7.4AI score0.71275EPSS
Exploits1References11Affected Software1
Cvelist
Cvelist
added 2008/10/15 12:0 a.m.22 views

CVE-2008-3477

Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to...

7.5AI score0.71275EPSS
Exploits1References11
Cvelist
Cvelist
added 2008/10/14 10:0 p.m.21 views

CVE-2008-4478

Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to execute arbitrary code via a crafted 1 Content-Length header in a SOAP request or 2 Netware Core Protocol opcode 0x0F message, which triggers a heap-based buffer...

7.6AI score0.60771EPSS
Exploits1References14
OSV
OSV
added 2008/10/05 12:0 a.m.36 views

DSA-1644-1 mplayer - integer overflows

Bulletin has no description...

9.3CVSS6AI score0.03588EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/10/03 12:0 a.m.24 views

mplayer -- multiple integer overflows

The remote host is missing an update to the system as announced in the referenced advisory. VID 724e6f93-8f2a-11dd-821f-001cc0377035 OpenVAS Vulnerability Test $ Description: Auto generated from VID 724e6f93-8f2a-11dd-821f-001cc0377035 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

9.3CVSS0.7AI score0.03588EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/10/03 12:0 a.m.20 views

mplayer -- multiple integer overflows

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS6.6AI score0.03588EPSS
Exploits0References2
NVD
NVD
added 2008/10/02 6:18 p.m.19 views

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

9.3CVSS8.4AI score0.02999EPSS
Exploits0References14
OSV
OSV
added 2008/10/02 6:18 p.m.5 views

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

6.3AI score
Exploits0References14
Rows per page
Query Builder