CVE-2008-5263

CVE-2008-5263 affects ksquirrel-libs 0.8.0. The vulnerability lies in the function mt_codec::getHdrHead within kernel/kls_hdr/fmt_codec_hdr.cpp, where boundary/stack handling can be exploited to cause stack-based buffer overflows when processing crafted Radiance RGBE images (*.hdr). This can allo...

ksquirrel-libs库RGBE文件解析栈溢出漏洞

BUGTRAQ ID: 33902 CVECAN ID: CVE-2008-5263 ksquirrel-libs是一组KSquirrel的图形解码库。 ksquirrel-libs库的kernel/klshdr/fmtcodechdr.cpp文件中的mtcodec::getHdrHead函数存在栈溢出漏洞，如果用户受骗使用链接到该库的应用程序打开了特制的Radiance RGBE（.hdr）文件的话，就可以触发这个溢出，导致执行任意代码。 Baryshev Dmitry ksquirrel-libs 0.8 厂商补丁： Baryshev Dmitry ---------------...

Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows

====================================================================== Secunia Research 25/02/2009 - ksquirrel-libs Radiance RGBE Buffer Overflows - ====================================================================== Table of Contents Affected...

Fedora Update for e2fsprogs FEDORA-2007-4461

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bluez-libs FEDORA-2008-6140

Check for the Version of bluez-libs OpenVAS Vulnerability Test Fedora Update for bluez-libs FEDORA-2008-6140 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for bluez-libs FEDORA-2008-6133

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bluez-libs FEDORA-2008-6140

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200901-10 (gnutls)

The remote host is missing updates announced in advisory GLSA 200901-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CentOS Security Advisory CESA-2009:0003 (xen)

The remote host is missing updates to xen announced in advisory CESA-2009:0003. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

PlaySms 0.9.3 - Multiple LocalRemote File Inclusions

PlaySms 0.9.3 - Multiple LocalRemote File Inclusions ==:RFI/LFI:== ===================== script:playsms 0.9.3 ========================================================================== download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&bigmirror=0...

Gentoo Security Advisory GLSA 200812-23 (imlib2)

The remote host is missing updates announced in advisory GLSA 200812-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libsamplerate: User-assisted execution of arbitrary code

Background Secret Rabbit Code aka libsamplerate is a Sample Rate Converter for audio. Description Russell O'Connor reported a buffer overflow in src/srcsinc.c related to low conversion ratios. Impact A remote attacker could entice a user or automated system to process a specially crafted audio fi...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2008:0896 Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting languag...

[SECURITY] Fedora 8 Update: bluez-libs-3.35-1.fc8

Libraries for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

Fedora 8 : bluez-libs-3.35-1.fc8 / bluez-utils-3.35-3.fc8 (2008-6140)

The remote Fedora host is missing one or more security updates : bluez-utils-3.35-3.fc8 : - Thu Jul 10 2008 - Will Woods - 3.35-3 - Re-add hid2hci - Fri Jul 4 2008 - Bastien Nocera - 3.35-2 - Re-add hidd - Thu Jul 3 2008 - Bastien Nocera - 3.35-1 - Update to 3.35 - Fri Jun 27 2008 - Bastien Nocer...

openSUSE 10 Security Update : bluez-audio (bluez-audio-5441)

Missing length checks in bluez-libs could cause a buffer overflow in Bluetooth applications. Malicious bluetooth devices could potentially exploit that to execute arbitrary code CVE-2008-2374. Note: The source code of each application that uses vulnerable functions of bluez-libs needs to be adapt...

Gentoo Security Advisory GLSA 200404-11 (dev-libs/pwlib)

The remote host is missing updates announced in advisory GLSA 200404-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200703-22 (nss)

The remote host is missing updates announced in advisory GLSA 200703-22. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200409-30 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200409-30. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200609-06 (adplug)

The remote host is missing updates announced in advisory GLSA 200609-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...