X.org MIT-SHM extension arbitrary memory read

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...

Debian Security Advisory DSA 1581-1 (gnutls13)

The remote host is missing an update to gnutls13 announced via advisory DSA 1581-1. OpenVAS Vulnerability Test $Id: deb15811.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1581-1 gnutls13 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1581-1 : gnutls13 - several vulnerabilities

Several remote vulnerabilities have been discovered in GNUTLS, an implementation of the SSL/TLS protocol suite. NOTE: The libgnutls13 package, which provides the GNUTLS library, does not contain logic to automatically restart potentially affected services. You must restart affected services...

DSA-1581-1 gnutls13 - potential code execution

Bulletin has no description...

CVE-2008-1598

CVE-2008-1598 concerns the IBM AIX 6.1 kernel: local users with ProbeVue privileges can read arbitrary kernel memory via unspecified vectors. The vulnerability is tied to the AIX 6.1 kernel component (bos.mp64) and could lead to leakage of sensitive information, with a CVSS base score of 4.7 (Loc...

CVE-2008-1598

The kernel in IBM AIX 6.1 allows local users with ProbeVue privileges to read arbitrary kernel memory and obtain sensitive information via unspecified vectors...

Solaris 8/9/10 fifofs I_PEEK Local Kernel memory Leak Exploit

Exploit for solaris platform in category local exploits ============================================================= Solaris 8/9/10 fifofs IPEEK Local Kernel memory Leak Exploit ============================================================= / $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp...

CVE-2008-0010

The copyfromusermmapsem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations...

Out-of-bounds

modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a craft...

CVE-2008-0010: Improper Input Validation

The copyfromusermmapsem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain userspace pointer before dereference, which allow local users to read from arbitrary kernel memory locations...

Mozilla information disclosure flaw

modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a craft...

CVE-2007-4770: Undefined Security Weakness

libicu in International Components for Unicode ICU 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero aka \0, which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames...

CVE-2007-6428: Undefined Security Weakness

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...

xfree86: information disclosure via TOG-CUP extension

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...

SuSE 10 Security Update : imlib2-loaders (ZYPP Patch Number 2261)

Various security problems have been fixed in the imlib2 image loaders : - A stack-based buffer overflow in loaderpnm.c could be used by attackers to execute code by supplying a handcrafted PNM image. CVE-2006-4809 - A heap buffer overflow in loadertga.c could potentially be used by attackers to...

SuSE 10 Security Update : imlib2-loaders (ZYPP Patch Number 2245)

Various security problems have been fixed in the imlib2 image loaders : - A stack-based buffer overflow in loaderpnm.c could be used by attackers to execute code by supplying a handcrafted PNM image. CVE-2006-4809 - A heap buffer overflow in loadertga.c could potentially be used by attackers to...

SuSE 10 Security Update : clamav (ZYPP Patch Number 2179)

Two security problems have been found in the antivirus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute code. - A problem in dealing with PE Portable Executables aka Windows .EXE files could...

CVE-2007-6207

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...

CVE-2007-6207: Improper Input Validation

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...

CVE-2007-6207

CVE-2007-6207 affects Xen 3.x on IA-64 where mov_to_rr RID is not validated, allowing a VTi domain to read memory from other domains. The vulnerability enables partial confidentiality loss. Remediation, as evidenced by RHSA/CESA advisories and OpenV/OSS listings, is to apply the kernel updates th...