9892 matches found
[USN-944-1] GNU C Library vulnerabilities
=========================================================== Ubuntu Security Notice USN-944-1 May 25, 2010 glibc, eglibc vulnerabilities CVE-2008-1391, CVE-2010-0296, CVE-2010-0830 =========================================================== A security issue affects the following Ubuntu releases:...
CVE-2010-1513
Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via 1 a large JPG image, related to the jpg2bitmap function or 2 a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows...
CVE-2010-1513
Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via 1 a large JPG image, related to the jpg2bitmap function or 2 a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows...
CVE-2010-1513
Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via 1 a large JPG image, related to the jpg2bitmap function or 2 a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows...
CVE-2010-1513
Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via 1 a large JPG image, related to the jpg2bitmap function or 2 a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows...
CVE-2010-1513
Ziproxy contains a vulnerability in src/image.c up to version 3.0.1 where integer overflows on processing unusually large JPG/PNG images lead to heap-based buffer overflows and remote arbitrary code execution. The issue affects Ziproxy before 3.0.1; remediation is to upgrade to 3.0.1 or newer (pe...
USN-944-1: GNU C Library vulnerabilities
Maksymilian Arciemowicz discovered that the GNU C library did not correctly handle integer overflows in the strfmon function. If a user or automated system were tricked into processing a specially crafted format string, a remote attacker could crash applications, leading to a denial of service...
IBM Informix Dynamic Server librpc.dll Multiple Buffer Overflows (CVE-2009-2753)
Informix is a family of relational database management system RDBMS products by IBM. IBM Informix Dynamic Server is an online transaction processing data server. Multiple buffer overflow vulnerabilities has been reported in IBM's Informix Dynamic Server. The vulnerabilities are due to insufficien...
CVE-2009-4880
Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted format string, as demonstrated by a crafted first argument to th...
Adobe Shockwave multiple security vulnerabilities
Multiple buffer overflows, integer overflows, memory corruptions, code executions...
CVE-2010-0998
Multiple stack-based buffer overflows in Free Download Manager FDM before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving 1 the folders feature in Site Explorer, 2 the websites feature in Site Explorer, 3 an FTP URI, or 4 a redirect...
Stack overflow
Multiple stack-based buffer overflows in Free Download Manager FDM before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving 1 the folders feature in Site Explorer, 2 the websites feature in Site Explorer, 3 an FTP URI, or 4 a redirect...
openSUSE Security Update : texlive (openSUSE-SU-2010:0251-1)
Specially crafted dvi files could cause buffer overflows in dvips and dvipng CVE-2010-0827, CVE-2010-0829, CVE-2010-0739, CVE-2010-1440. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : texlive (openSUSE-SU-2010:0251-1)
Specially crafted dvi files could cause buffer overflows in dvips and dvipng CVE-2010-0827, CVE-2010-0829, CVE-2010-0739, CVE-2010-1440. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Free Download Manager multiple security vulnerabilities
Buffer overflows, directory traversals...
CVE-2010-0129
Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...
CVE-2010-0129
Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...
CVE-2010-0129
Adobe Shockwave Player is affected by CVE-2010-0129 due to multiple integer overflows leading to memory corruption via specially crafted Director (.dir) files. The vulnerability affects Shockwave Player prior to 11.5.7.609 and can enable remote memory corruption or potential arbitrary code execut...
VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129)
VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities CVE-2010-0129 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to so...