Microsoft Office RTF Consecutive Drawing Object Parsing Heap Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page, open a malicious e-mail, or open a malicious file. The specific flaw...

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow source: https://www.securityfocus.com/bid/32313/info The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently...

FreeBSD Security Advisory (FreeBSD-SA-06:18.ppp.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:18.ppp.asc ADV FreeBSD-SA-06:18.ppp.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-3247: Improper Restriction of Operations within the Bounds of a Memory Buffer

The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x8664 platforms uses an incorrect size for ldtdesc, which allows local users to cause a denial of service system crash or possibly gain privileges via unspecified vectors...

CVE-2008-1952: Improper Restriction of Operations within the Bounds of a Memory Buffer

The backend for XenSource Xen Para Virtualized Frame Buffer PVFB in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service crash by mapping an arbitrary amount of guest memory...

CVE-2008-2786: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785. A CVE identifier has been assigned for tracking purposes...

VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow

The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected...

Google Android Web Browser - .GIF File Heap Buffer Overflow

Google Android Web Browser - .GIF File Heap Buffer Overflow source: https://www.securityfocus.com/bid/28005/info Android Web Browser is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized...

GlobalLink 2.6.1.2 - HanGamePlugincn18.dll ActiveX Control Multiple Buffer Overflow Vulnerabilities

GlobalLink 2.6.1.2 - HanGamePlugincn18.dll ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27626/info GlobalLink is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds-check user-supplied data before copying it...

GlobalLink GLChat.ocx 2.5.1 - ActiveX Control ChatRoom() Remote Buffer Overflow

GlobalLink GLChat.ocx 2.5.1 - ActiveX Control ChatRoom Remote Buffer Overflow source: https://www.securityfocus.com/bid/27393/info GlobalLink 'GLChat.ocx' ActiveX control is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it int...

CVE-2007-5939: Improper Restriction of Operations within the Bounds of a Memory Buffer

The gssuserok function in appl/ftp/ftpd/gssuserok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid username. NOTE: the vulnerability was originally reported for ftpd.c, but this is...

Ubuntu 6.06 LTS / 6.10 / 7.04 : libsndfile vulnerability (USN-525-1)

Robert Buchholz discovered that libsndfile did not correctly validate the size of its memory buffers. If a user were tricked into playing a specially crafted FLAC file, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the...

GlobalLink 2.7.0.8 - ConnectAndEnterRoom ActiveX Control Stack Buffer Overflow

GlobalLink 2.7.0.8 - ConnectAndEnterRoom ActiveX Control Stack Buffer Overflow source: https://www.securityfocus.com/bid/26244/info GlobalLink is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an...

GlobalLink 2.7.0.8 - ConnectAndEnterRoom ActiveX Control Stack Buffer Overflow

source: https://www.securityfocus.com/bid/26244/info GlobalLink is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrar...

IBM Lotus Domino 7.0.2 - IMAP4 LSUB Buffer Overflow

IBM Lotus Domino 7.0.2 - IMAP4 LSUB Buffer Overflow source: https://www.securityfocus.com/bid/26219/info IBM Lotus Domino Server is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory...

CVE-2003-1496: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840...

Nortel Networks UNIStim IP SoftPhone 2050 - RTCP Port Buffer Overflow

Nortel Networks UNIStim IP SoftPhone 2050 - RTCP Port Buffer Overflow source: https://www.securityfocus.com/bid/26118/info Nortel Networks UNIStim IP Softphone is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it t...

CVE-2007-4668: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

Buffer overflow

The ftbitmapassurebuffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors involving bitmap fonts, related to a "memory buffer overwrite bug."...

CVE-2007-3506

The ftbitmapassurebuffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors involving bitmap fonts, related to a "memory buffer overwrite bug."...