113 matches found
CVE-2009-0246
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE aka .hdr file...
zlib DoS
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...
zlib DoS
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...
Microsoft Windows Explorer PNG DoS
Infinite loop on invalid PNG file parsing...
Path traversal
CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path...
CVE-2006-1340
CVE-2006-1340 affects CuteNews 1.4.1 (and possibly earlier) and involves a remote path-disclosure vulnerability. The description notes that an invalid file path could allow an attacker to obtain the installation path via unspecified vectors. The CVSS basis from NVD is 5.0 (Medium) with network ac...
Remote file inclusion
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability...
CVE-2005-1849
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...
DEBIAN-CVE-2005-1849
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...
zlib DoS
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes a large dynamic tree to be produced...
Debian DSA-740-1 : zlib - remote denial of service
An error in the way zlib handles the inflation of certain compressed files can cause a program which uses zlib to crash when opening an invalid file. This problem does not affect the old stable distribution woody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
DEBIAN-CVE-2004-1174
direntry.c in Midnight Commander mc 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...
CVE-2004-1396
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service application crash or CPU consumption via 1 an mp4 or m4a playlist file that contains invalid tag data or 2 an invalid .nsv or .nsa file...