CVE-2010-4142

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 SCPCINITIALIZE, 2 SCPCINITIALIZERF, or 3 SCPCTXTEVENT packet. NOTE: it was later reported that 1.06 is...

CVE-2010-4142

DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10 and earlier) is affected by stack-based buffer overflows in SCPC_INITIALIZE, SCPC_INITIALIZE_RF, and SCPC_TXTEVENT handling. Exploitation could crash the service and, in some cases, allow remote arbitrary code execution. Known affected versions inclu...

CVE-2010-3036

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port 1 443 or 2 1741, aka Bug ID CSCti41352...

CVE-2010-2585

Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls allow remote attackers to execute arbitrary code via a long 1 DestURL or 2 SourceFile property value...

Mozilla Firefox / Thunderbird / Seamonkey / NSS multiple security vulnerabilities

Multiple memory corruptions, buffer overflows, crossite scripting, TLS/SSL vulnerabilities, code execution...

Mandriva Update for dovecot MDVSA-2010:196 (dovecot)

Check for the Version of dovecot OpenVAS Vulnerability Test Mandriva Update for dovecot MDVSA-2010:196 dovecot Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for dovecot MDVSA-2010:196 (dovecot)

Check for the Version of dovecot OpenVAS Vulnerability Test Mandriva Update for dovecot MDVSA-2010:196 dovecot Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2010-3751

Multiple heap-based buffer overflows in an ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 allow remote attackers to execute arbitrary code via a long .smil argument to the 1 tfile, 2 pnmm, or 3 cdda protocol handler...

openSUSE Security Update : mipv6d (openSUSE-SU-2010:0736-1)

the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages CVE-2010-2522. remote attackers could cause buffer overflows in mipv6d CVE-2010-2523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

openSUSE Security Update : mipv6d (openSUSE-SU-2010:0736-1)

the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages CVE-2010-2522. remote attackers could cause buffer overflows in mipv6d CVE-2010-2523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Microsoft Office security vulnerabilities

Multiple memory corruptions, array index and buffer overflows, etc in Microsoft Word and Excel...

CVE-2010-2601

Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server BES software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a...

CVE-2010-2601

Multiple buffer-overflow vulnerabilities in the PDF distiller of the Attachment Service in BlackBerry Enterprise Server (BES) and related BlackBerry software (versions 4.1.7 and earlier; 5.0.0–5.0.2; BlackBerry Professional Software 4.1.4 and earlier) allow user-assisted remote attackers to cause...

Winamp 5.5.8.2985 - Multiple Buffer Overflows

Winamp 5.5.8.2985 - Multiple Buffer Overflows Source: http://aluigi.org/adv/winamp1-adv.txt Luigi Auriemma Application: Winamp http://www.winamp.com Versions: = 5.5.8.2985 aka v5.581 Platforms: Windows Bugs: A integer overflow in inmkv B integer overflow in innsv C integer overflow in inmidi D...

CVE-2010-3110

Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain privileges via unspecified vectors...

SuSE 10 Security Update : libapr1 (ZYPP Patch Number 6545)

This update of libapr-util1 and libapr1 fixes multiple integer overflows that could probably be used to execute arbitrary code remotely. CVE-2009-2412 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : gzip (ZYPP Patch Number 6793)

The following bug has been fixed : Specially crafted gzip archives could trigger integer overflows. Attackers could exploit that to crash gzip or potentially execute arbitrary code CVE-2010-0001. Only 64bit architectures are affected by this flaw. %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 7052)

This update of libtiff fixes several integer overflows that could lead to a corrupted heap memory. This bug can be exploited remotely with a crafted TIFF file to cause an application crash or probably to execute arbitrary code. CVE-2010-1411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Mandriva Linux Security Advisory : kernel (MDVSA-2010:198)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount symlinks, which allows attackers to have an unknown impact, related to LOOKUPFOLLOW. CVE-2010-1088 The tcfilltclass function in...

CentOS 3 / 4 / 5 : mikmod (CESA-2010:0720)

Updated mikmod packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...