3547 matches found
CVE-2010-1748: Improper Restriction of Operations within the Bounds of a Memory Buffer
The cgiinitializestring function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % percent character without two subsequent hex characters, which...
CVE-2010-1399: Improper Restriction of Operations within the Bounds of a Memory Buffer
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during a selection change on a form input element, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via...
CVE-2009-4850: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file...
Mozilla Fast-Tracks Fix For Critical Firefox Flaw
Mozilla has fast-tracked a patch for a critical vulnerability affecting its flagship Firefox browser. The patch, which was originally slated for release on March 30, fixes a vulnerability that could allow remote code execution attacks. The flaw was originally released into the VulnDisco exploit...
WOFF heap corruption due to integer overflow — Mozilla
Security researcher Evgeny Legerov of Intevydis reported that the WOFF decoder contains an integer overflow in a font decompression routine. This flaw could result in too small a memory buffer being allocated to store a downloadable font. An attacker could use this vulnerability to crash a victim...
CVE-2010-0553: Improper Restriction of Operations within the Bounds of a Memory Buffer
Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via a long NMEA data sentence...
Touch22 Image22 ActiveX Control Buffer Overflow
Touch22 Image22 ActiveX is an application to create images for Microsoft Windows. A buffer overflow vulnerability has been discovered in Touch22 Image22 ActiveX. The vulnerability is due to an error in the application that fails to properly bounds check user-supplied data before copying it into a...
Mercury/32 <= v4.01b PH Server Module Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercury/32 %...
CVE-2009-3873: Improper Restriction of Operations within the Bounds of a Memory Buffer
The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968...
Omni-NFS Multiple Stack Buffer Overflow Vulnerabilities
Omni-NFS is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied network data before copying it into an insufficiently sized memory buffer. The issues affect both server and client. Exploiting these issues allows...
CVE-2008-7227: Improper Restriction of Operations within the Bounds of a Memory Buffer
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors...
Microsoft Windows Embedded OpenType Font Engine Heap Overflow Vulnerability
Description Microsoft Windows is prone to a remotely exploitable heap-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Remote attackers can exploit this issue to execute arbitrary machine...
Microsoft Windows Embedded OpenType Font Engine Integer Overflow Vulnerability
Description Microsoft Windows is prone to a remotely exploitable integer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Remote attackers can exploit this issue to execute arbitrary machine code in...
CVE-2009-1672: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allows remote attackers to 1 execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes v...
CVE-2009-1602: Improper Restriction of Operations within the Bounds of a Memory Buffer
Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service daemon outage or CPU consumption via multiple long SMTP commands, as demonstrated by HELO commands...
Ubuntu Update for libsndfile vulnerability USN-525-1
Ubuntu Update for Linux kernel vulnerabilities USN-525-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5251.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libsndfile vulnerability USN-525-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CVE-2009-0018: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory...
Ghostscript < 8.64 'gdevpdtb.c' Buffer Overflow Vulnerability
No description provided by source. Ghostscript is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue allows remote attackers to overwrite a sensitive memory buffer with...
ghostscript -- buffer overflow vulnerability
SecurityFocus reports: Ghostscript is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue allows remote attackers to overwrite a sensitive memory buffer with arbitrary dat...
MS09-0 0 1 Analysis-vulnerability warning-the black bar safety net
HD Moore moves really fast, the analysis has come out. The effect is only a DOS, not use. This update contains three vulnerabilities, the first one in the last 9 months out, only DOS, after two rather special, is not utilized, the reason is more complex, he is so described: The next two bugs CVE-...