CVE-2006-2393

The CVE-2006-2393 entry documents a vulnerability in Empire (server) prior to and including version 4.3.2, where the client_cmd function can be triggered remotely. The underlying issue is that excessively long text strings appended to the player->client buffer lead to an invalid memory access,...

CVE-2006-2393

The clientcmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service application crash by causing long text strings to be appended to the player-client buffer, which causes an invalid memory access...

CVE-2006-2393: Undefined Security Weakness

The clientcmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service application crash by causing long text strings to be appended to the player-client buffer, which causes an invalid memory access...

Ubuntu 5.04 / 5.10 : linux-source-2.6.10, linux-source-2.6.12 vulnerabilities (USN-281-1)

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

CVE-2006-0034

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...

Heap overflow

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...

CVE-2006-0034

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...

USN-281-1: Linux kernel vulnerabilities

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

USN-279-1: libnasl/nessus vulnerability

Jayesh KS discovered that the naslsplit function in the NASL Nessus Attack Scripting Language library did not check for a zero-length separator argument, which lead to an invalid memory allocation. This library is primarily used in the Nessus security scanner; a remote attacker could exploit this...

Code injection

Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service via crafted DNS responses messages that cause 1 a buffer over-read or 2 infinite recursion, which can trigger a segmentation fault or invalid memory access, ...

Integer overflow

Integer overflow in the RTSPmsglen function in rtsp/RTSPmsglen.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service application crash via a large HTTP Content-Length value, which leads to an invalid memory access...

CVE-2006-2023

Integer overflow in the RTSPmsglen function in rtsp/RTSPmsglen.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service application crash via a large HTTP Content-Length value, which leads to an invalid memory access...

CVE-2006-2023

Integer overflow in the RTSPmsglen function in rtsp/RTSPmsglen.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service application crash via a large HTTP Content-Length value, which leads to an invalid memory access...

Table Rebuilding Code Execution Vulnerability — Mozilla

An anonymous researcher for TippingPoint and the Zero Day Initiative reports that an invalid and nonsensical ordering of table-related tags causes Mozilla to use a negative array index. This invalid memory use can be exploited to run code of the attacker's choice...

CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

DEBIAN-CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1630

The CVE-2006-1630 issue affects ClamAV prior to version 0.88.1. The vulnerability is an invalid memory access within the cli_bitset_set() function in libclamav/others.c, which can allow a remote attacker to trigger a denial of service. A fix is available in 0.88.1 and later releases; upgrading to...

CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1630: Undefined Security Weakness

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

Code injection

The 1 ZDMissingPlayer, 2 ZDUseItem, and 3 ZDLoadNewClientLevel functions in svmain.cpp for a Zdaemon 1.08.01 and b X-Doom allows remote attackers to cause a denial of service crash via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array...