USN-1132-1: apturl vulnerability

It was discovered that apturl incorrectly handled certain long URLs. If a user were tricked into opening a very long URL, an attacker could cause their desktop session to crash, leading to a denial of service...

CVE-2011-2089

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE...

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object...

DEBIAN-CVE-2011-1659

Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than...

CVE-2011-1659

Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than...

Linux Kernel "iriap_getvaluebyclass_indication()"缓冲区溢出漏洞

CVE ID: CVE-2011-1180 Linux 是一种类似于UNIX 计算机操作系统。 Linux Kernel "iriapgetvaluebyclassindication"在实现上存在缓冲区溢出漏洞，本地攻击者可利用此漏洞造成拒绝服务或控制受影响系统。 此漏洞源于net/irda/iriap.c中的"iriapgetvaluebyclassindication"内的边界错误，可通过超长名称或属性造成栈缓冲区溢出。 Linux kernel 2.6.x 厂商补丁： Linux -----...

CVE-2010-4228

Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of service abend via a long DELE command, a different vulnerability than CVE-2010-0625.4...

Wireshark: Malformed LDAP filter string causes Denial of Service via excessive memory consumption

epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service memory consumption via 1 a long LDAP filter string or 2 an LDAP filter string containing many elements...

CVE-2011-1413

Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server, which allows remote attackers to cause a denial of service application crash via vectors involving long messages...

CVE-2011-1413

Removed by vendor...

CVE-2011-1413

Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server, which allows remote attackers to cause a denial of service application crash via vectors involving long messages...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

Exploit for windows platform in category remote exploits $Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...

CVE-2011-0058

Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a long string that triggers construction of a long text run...

CVE-2011-0058

Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a long string that triggers construction of a long text run...

CVE-2011-0530

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device nbd before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression...

DEBIAN-CVE-2010-3441

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via 1 a crafted input file, related to the PUT0 and PUT1 output macros; 2 a crafted input file, related to the trimtitle function; and possibly 3 a long -O option on a command line...

Buffer overflow

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via 1 a crafted input file, related to the PUT0 and PUT1 output macros; 2 a crafted input file, related to the trimtitle function; and possibly 3 a long -O option on a command line...

CVE-2010-3441

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via 1 a crafted input file, related to the PUT0 and PUT1 output macros; 2 a crafted input file, related to the trimtitle function; and possibly 3 a long -O option on a command line...

CVE-2010-3441

Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via 1 a crafted input file, related to the PUT0 and PUT1 output macros; 2 a crafted input file, related to the trimtitle function; and possibly 3 a long -O option on a command line...

Stack overflow

Stack-based buffer overflow in the NRouter aka Router service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages, aka SPR KLYH87LKRE...