CVE-2008-0010

The copyfromusermmapsem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations...

Out-of-bounds

modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a craft...

Mozilla information disclosure flaw

modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a craft...

xfree86: information disclosure via TOG-CUP extension

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...

SuSE 10 Security Update : imlib2-loaders (ZYPP Patch Number 2245)

Various security problems have been fixed in the imlib2 image loaders : - A stack-based buffer overflow in loaderpnm.c could be used by attackers to execute code by supplying a handcrafted PNM image. CVE-2006-4809 - A heap buffer overflow in loadertga.c could potentially be used by attackers to...

SuSE 10 Security Update : imlib2-loaders (ZYPP Patch Number 2261)

Various security problems have been fixed in the imlib2 image loaders : - A stack-based buffer overflow in loaderpnm.c could be used by attackers to execute code by supplying a handcrafted PNM image. CVE-2006-4809 - A heap buffer overflow in loadertga.c could potentially be used by attackers to...

SuSE 10 Security Update : clamav (ZYPP Patch Number 2179)

Two security problems have been found in the antivirus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute code. - A problem in dealing with PE Portable Executables aka Windows .EXE files could...

CVE-2007-6207

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...

CVE-2007-6207

CVE-2007-6207 affects Xen 3.x on IA-64 where mov_to_rr RID is not validated, allowing a VTi domain to read memory from other domains. The vulnerability enables partial confidentiality loss. Remediation, as evidenced by RHSA/CESA advisories and OpenV/OSS listings, is to apply the kernel updates th...

kernel LTC31426-4k page mapping support for userspace in 64k kernels

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space...

openSUSE 10 Security Update : imlib2-loaders (imlib2-loaders-2244)

Various security problems have been fixed in the imlib2 image loaders : CVE-2006-4809: A stack-based buffer overflow in loaderpnm.c could be used by attackers to execute code by supplying a handcrafted PNM image. CVE-2006-4808: A heap buffer overflow in loadertga.c could potentially be used by...

openSUSE 10 Security Update : imlib2-loaders (imlib2-loaders-2265)

Various security problems have been fixed in the imlib2 image loaders : CVE-2006-4809: A stack-based buffer overflow in loaderpnm.c could be used by attackers to execute code by supplying a handcrafted PNM image. CVE-2006-4808: A heap buffer overflow in loadertga.c could potentially be used by...

openSUSE 10 Security Update : mysql (mysql-1312)

Attackers could read portions of memory by using a user name with trailing null byte or via COMTABLEDUMP command CVE-2006-1516, CVE-2006-1517. Attackers could execute arbitrary code by causing a buffer overflow via specially crafted COMTABLEDUMP packets CVE-2006-1518. %NASLMINLEVEL 70300 C Tenabl...

openSUSE 10 Security Update : clamav (clamav-2180)

Two security problems have been found and fixed in the antivirus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute code. CVE-2006-4182: A problem in dealing with PE Portable Executables aka Windo...

CVE-2007-5225

CVE-2007-5225 is a Solaris local-privilege/ memory-leak issue caused by an integer signedness error in fifofs (FIFO filesystems) that allows a local user to read unspecified memory via a negative value to the I_PEEK ioctl on Solaris 8–10. For Solaris 10, patches exist: 127738-01 for x86 and 12773...

NovaSTOR NovaNET 11.0 - Remote Denial of Service Arbitrary Memory Read

NovaSTOR NovaNET 11.0 - Remote Denial of Service Arbitrary Memory Read // source: https://www.securityfocus.com/bid/39693/info NovaStor NovaNET is prone to code-execution, denial-of-service, and information-disclosure vulnerabilities. An attacker can exploit these issues to execute arbitrary code...

GLSA-200708-17 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-17 Opera: Multiple vulnerabilities An error known as 'a virtual function call on an invalid pointer' has been discovered in the JavaScript engine CVE-2007-4367. Furthermore, iDefense Labs reported that an already-freed...

Opera: Multiple vulnerabilities

Background Opera is a multi-platform web browser. Description An error known as "a virtual function call on an invalid pointer" has been discovered in the JavaScript engine CVE-2007-4367. Furthermore, iDefense Labs reported that an already-freed pointer may be still used under unspecified...

Exploits Diskeeper Remote Memory Read

No description provided by source. //Diskeeper Remote Memory Read //By: Pravus define WIN32LEANANDMEAN define PORT 31038 define DELAY 50 define CRTSECURENODEPRECATE define USE32BITTIMET define servername "127.0.0.1" pragma comment lib,"ws232" include winsock2.h include windows.h include stdlib.h...

Remote Memory Read in Diskeeper 9 - 2007

Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison function that is remotely, anonymously...