SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6616)

The Mozilla XULRunner engine was updated to version 1.9.0.15 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to...

pidgin: DoS via specially-crafted ICQWebMessage

The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service application crash via a crafted ICQ web message that triggers allocation of a large amount of memory...

DEBIAN-CVE-2009-0166

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service crash via a crafted PDF file that triggers a free of uninitialized memory...

Mozilla Thunderbird Multiple Vulnerabilities Feb-09 (Linux)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodthunderbirdmultvulnfeb09lin.nasl 5148 2017-01-31 13:16:55Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities Feb-09 Linux Authors: Sharath S Copyright: Copyright c 20...

Mozilla Thunderbird Multiple Vulnerabilities Feb-09 (Windows)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodthunderbirdmultvulnfeb09win.nasl 5148 2017-01-31 13:16:55Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities Feb-09 Windows Authors: Sharath S Copyright: Copyright c...

Mozilla Thunderbird Multiple Vulnerabilities (Feb 2009) - Linux

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Security Advisory (FreeBSD-SA-07:02.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:02.bind.asc ADV FreeBSD-SA-07:02.bind.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Multiple vulnerabilities in Dropteam 1.3.3

Luigi Auriemma Application: Dropteam http://www.battlefront.com/products/dropteam/news.html Versions: = 1.3.3 Platforms: Windows, Linux and Mac Bugs: A format string through packet 0x01 B buffer-overflow through packet 0x5c C heap-overflow through packet 0x18 D various memory crash through packet...

Moderate: bind security update

30:9.3.3-8 - added fix for 224445 - CVE-2007-0493 BIND might crash after attempting to read free-ed memory - added fix for 225229 - CVE-2007-0494 BIND dnssec denial of service - Resolves: rhbz224445 - Resolves: rhbz225229...

ntp security update

CentOS Errata and Security Advisory CESA-2006:0393 Updated ntp packages that fix several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a reference...

RHEL 4 : ntp (RHSA-2006:0393)

Updated ntp packages that fix several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a reference time source. The NTP daemon ntpd, when run with the...

Out of memory crash in Freeciv 2.0.7

Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.0.7 Platforms: Windows, nix, BSD, MacOS and more Bug: bad memory allocation Exploitation: remote, versus server Date: 06 Mar 2006 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. MIT Kerberos 5 krb5 1.3 through 1.4.1 Key Distribution Center KDC allows remote attackers to cause a denial of service application crash via a certain valid TCP connection that causes a free of unallocated memory...

In-game cl_guid crash in Soldier of Fortune II 1.03

Luigi Auriemma Application: Soldier of Fortune II http://sof2.ravensoft.com Versions: = 1.03 gold Platforms: Windows, Linux and MacOS Bug: crash caused by invalid memory pointer Exploitation: remote, versus server partially in-game Date: 24 Feb 2005 Author: Luigi Auriemma e-mail:...

IBM DB2 Windows Permission Problems (#NISR05012005F)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 Windows Permission Problems Systems Affected: DB2 8.1 Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: Chris Anley chris at ngssoftware.com Relates to: http://www.ngssoftware.com/advisories/db2-02.txt Date of Publi...

RHEL 3 : freeradius (RHSA-2004:609)

Updated freeradius packages that fix a number of denial of service vulnerabilities as well as minor bugs are now available for Red Hat Enterprise Linux 3. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized authentication and authorization for...

gaim -- MSN denial-of-service vulnerabilities

The Gaim team discovered denial-of-service vulnerabilities in the MSN protocol handler: After accepting a file transfer request, Gaim will attempt to allocate a buffer of a size equal to the entire filesize, this allocation attempt will cause Gaim to crash if the size exceeds the amount of...

Mandrake Linux Security Advisory : ethereal (MDKSA-2003:070)

A number of string handling bugs were found in the packet dissectors in ethereal that can be exploited using specially crafted packets to cause ethereal to consume excessive amounts of memory, crash, or even execute arbitrary code. These vulnerabilities have been fixed upsteam in ethereal 0.9.13...

sysklogd update

New sysklogd packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue where a user could cause syslogd to crash. Thanks to Steve Grubb who researched the issue. Here are the details from the Slackware 9.1 ChangeLog: Sun May 2 17:16:41 PDT 2004...

[Full-Disclosure] Indigoperl Perledit 1.08

re: http://lists.insecure.org/lists/bugtraq/2003/Jun/0189.html still has unresolved issues with the "new" version 1.08 of Indigoperl's Perledit perledit binds to 0.0.0.0:1956 exploit c: telnet perledithost 1956 READY terminate telnet The instruction at "0x00405430" referenced memory at...