CVE-2008-1227

Stack-based buffer overflow in the silcfingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing SILC Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via long input data. NOTE...

Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)

Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with 1 a long key name in the xml header or 2 a long charset value, different issu...

IPS-1 Protection Updates for yardradius and Cisco IOS Vulnerabilities and IPS-1 Protocol and Protocol Subsystems Updates

A vulnerability in yardradius could allow a remote attacker to execute arbitrary code via a buffer overflow. A vulnerability in Cisco IOS 12.2T through 12.4 could allows remote attackers to bypass Authentication, Authorization, and Accounting AAA RADIUS authentication via a long username...

ghostscript: stack-based buffer overflow in .seticcspace operator

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator...

CVE-2008-1040

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

Buffer overflow

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

CVE-2008-1040

Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0.1 and 9.0.0, and Interstage Apworks 8.0.0 allows remote attackers to execute arbitrary code via a long URI...

PT-2008-2043 · Artifex +1 · Ghostscript +1

Name of the Vulnerable Software and Affected Versions: Ghostscript versions 8.61 and earlier Description: The issue allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator. This is due to a stack-based buffer overflow in...

Buffer overflow

Buffer overflow in Double-Take aka HP StorageWorks Storage Mirroring 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to have an unknown impact via a packet with a long string in the username field...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : pcre3 vulnerability (USN-581-1)

It was discovered that PCRE did not correctly handle very long strings containing UTF8 sequences. In certain situations, an attacker could exploit applications linked against PCRE by tricking a user or automated system in processing a malicious regular expression leading to a denial of service or...

USN-581-1: PCRE vulnerability

It was discovered that PCRE did not correctly handle very long strings containing UTF8 sequences. In certain situations, an attacker could exploit applications linked against PCRE by tricking a user or automated system in processing a malicious regular expression leading to a denial of service or...

Design/Logic Flaw

Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service reboot via a long ICMP echo request ping packet...

FreeBSD : xfce -- multiple vulnerabilities (024edd06-c933-11dc-810c-0016179b2dd5)

Gentoo reports : A remote attacker could entice a user to install a specially crafted 'rc' file to execute arbitrary code via long strings in the 'Name' and 'Comment' fields or via unspecified vectors involving the second vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Affiliate Market 0.1 Beta - Cross-Site Scripting SQL Injection

Affiliate Market 0.1 Beta - Cross-Site Scripting SQL Injection !/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script...

Affiliate Market 0.1 Beta - Cross-Site Scripting / SQL Injection

!/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

CVE-2007-6701

Multiple stack-based buffer overflows in the Spooler service nwspool.dll in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954...

CVE-2008-0766

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

QuickTime 7.4.1 - 'QTPlugin.ocx' Multiple Stack Overflow Vulnerabilities

Application: QuickTime sub test bar = String515305, "A" foo.SetBgColor bar End Sub ===== 5Credits ===== laurent gaffié laurent.gaffieremovethisatgmaildotcom milw0rm.com 2008-02-13...

Heap overflow

Multiple heap-based buffer overflows in the 1 FTP service and 2 administration service in Titan FTP Server 6.0.5.549 allow remote attackers to cause a denial of service daemon hang and possibly execute arbitrary code via a long command. NOTE: the USER and PASS commands for the FTP service are...

CVE-2008-0671

Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...