GLSA-200612-15 : McAfee VirusScan: Insecure DT_RPATH

The remote host is affected by the vulnerability described in GLSA-200612-15 McAfee VirusScan: Insecure DTRPATH Jakub Moc of Gentoo Linux discovered that McAfee VirusScan was distributed with an insecure DTRPATH which included the current working directory, rather than $ORIGIN which was probably...

[SA23286] Newtone ImageKit ActiveX Control Unspecified Buffer Overfow

TITLE: Newtone ImageKit ActiveX Control Unspecified Buffer Overfow SECUNIA ADVISORY ID: SA23286 VERIFY ADVISORY: http://secunia.com/advisories/23286/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Photo Loader 3.x http://secunia.com/product/12847/ ImageKit 6.x...

CVE-2006-3893

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2006-3893

CVE-2006-3893 involves multiple buffer overflows in the ActiveX controls of Newtone ImageKit (used by CASIO Photo Loader) that allow remote code execution via a crafted HTML document. Affected: Newtone ImageKit 5 before Fix 30 and ImageKit 6 before Fix 40; CASIO Photo Loader before 3.01. Exploita...

CVE-2006-3893

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document...

Newtone ImageKit ActiveX buffer overflow vulnerabilities

Overview The Newtone ImageKit ActiveX controls contain several buffer overflow vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Newtone ImageKit is a set of ActiveX controls that provide image processing, scanning, a...

DEBIAN-CVE-2006-4806

Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 ARGB loaderargb.c, 2 PNG loaderpng.c, 3 LBM loaderlbm.c, 4 JPEG loaderjpeg.c, or 5 TIFF loadertiff.c images...

DEBIAN-CVE-2006-4808

Heap-based buffer overflow in loadertga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TGA image...

DEBIAN-CVE-2006-4807

loadertga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service crash via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808...

DEBIAN-CVE-2006-4809

Stack-based buffer overflow in loaderpnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PNM image...

GLSA-200610-13 : Cheese Tracker: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200610-13 Cheese Tracker: Buffer Overflow Luigi Auriemma reported that the XM loader of Cheese Tracker contains a buffer overflow vulnerability in the loaderXM::loadintrumentinternal function from loaders/loaderxm.cpp. Impact : An...

Cheese Tracker: Buffer Overflow

Background Cheese Tracker is a Qt-based portable Impulse Tracker clone, a music tracker for the CT, IT, XM and S3M file formats. Description Luigi Auriemma reported that the XM loader of Cheese Tracker contains a buffer overflow vulnerability in the loaderXM::loadintrumentinternal function from...

USN-368-1: Qt vulnerability

An integer overflow was discovered in Qt's image loader. By processing a specially crafted image with an application that uses this library like Konqueror, a remote attacker could exploit this to execute arbitrary code with the application's privileges...

Debian DSA-1082-1 : kernel-source-2.4.17 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2004-0427 A local denial of service vulnerability i...

PT-2006-5806 · Php · Phpsatk

Name of the Vulnerable Software and Affected Versions: PHP System Administration Toolkit PHPSaTK affected versions not specified Description: A remote file inclusion issue in the loader.php file of PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the config parameter of...

USN-347-1: Linux kernel vulnerabilities

Sridhar Samudrala discovered a local Denial of Service vulnerability in the handling of SCTP sockets. By opening such a socket with a special SOLINGER value, a local attacker could exploit this to crash the kernel. CVE-2006-4535 Kirill Korotaev discovered that the ELF loader on the ia64 and sparc...

Linux kernel DoS

Special SOLINGER value for SCTP socket causes system to crash. ELF loader vulnerability on 64-bit system causes system to crash on malformed ELF binary...

libmikmod 3.2.2 - GT2 Loader Local Heap Overflow (PoC)

libmikmod 3.2.2 - GT2 Loader Local Heap Overflow PoC / by Luigi Auriemma / include include include include define VER "0.1" define cpyx,y strncpyx, y, sizeofx; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwstrFILE fd, uint8t str; void fwmemFILE fd,...

libmikmod <= 3.2.2 (GT2 loader) Local Heap Overflow PoC

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h define VER "0.1" define cpyx,y strncpyx, y, sizeofx; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwstrFILE fd, uint8t str; void...

Heap overflow in the GT2 loader of libmikmod 3.2.2

Luigi Auriemma Application: libmikmod http://mikmod.raphnet.net http://sourceforge.net/projects/mikmod/ Versions: = 3.2.2 and current CVS versions 2.x.x and all the others in which the GT2 file format isn't implemented are not vulnerable Platforms: Windows, POSIX, Mac Bug: heap overflow in GT2's...