GnuTLS libtasn1 ASN1 Length Fields Buffer Overflow (CVE-2012-1569)

A buffer overflow vulnerability has been reported in libtasn1, a component of GnuTLS. The vulnerability is due to an error in the libtasn1 library while handling length fields within the ASN.1 fields. A remote attacker can exploit this vulnerability by sending specially crafted certificates to th...

CVE-2011-1583

Multiple integer overflows in tools/libxc/xcdombzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers 1 a buffer overflow during a decompression loop or 2 an...

Buffer overflow

CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted audio content with QDM2 encoding, which triggers a buffer overflow due to inconsistent length fields, related to QDCA...

CVE-2010-0059

CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted audio content with QDM2 encoding, which triggers a buffer overflow due to inconsistent length fields, related to QDCA...

Buffer overflow

Buffer overflow in the processredirectpdu rdp.c function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol RDP redirect request with modified length fields...

DEBIAN-CVE-2003-0028

Integer overflow in the xdrmemgetbytes function, and possibly other functions, of XDR external data representation libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different...

security flaw

The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service crash via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields...

PT-2002-1419 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.2 and earlier Description: The issue is related to the ASN.1 parser, which can be exploited by remote attackers to cause a denial of service crash via a certain malformed packet. This occurs because Ethereal allocates...