FreeBSD : multiple vulnerabilities in ethereal (cdf18ed9-7f4a-11d8-9645-0020ed76ef5a)

Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including : - NetFlow - IGAP - EIGRP - PGM - IRDA - BGP - ISUP - TCAP - UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited...

Sun Java JDK/JRE Multiple Vulnerabilities (Apr 2009) - Windows

Sun Java JDK/JRE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : python (MDVSA-2008:163)

Multiple integer overflows in the imageop module in Python prior to 2.5.3 allowed context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows CVE-2008-1679. This was due to an incomplete fix for...

FreeBSD : GNU Anubis buffer overflows and format string vulnerabilities (8471bb85-6fb0-11d8-873f-0020ed76ef5a)

Ulf Harnhammar discovered several vulnerabilities in GNU Anubis. - Unsafe uses of sscanf'. The %s' format specifier is used, which allows a classical buffer overflow. auth.c - Format string bugs invoking syslog'. log.c, errs.c, ssl.c Ulf notes that these vulnerabilities can be exploited by a...

FreeBSD : metamail format string bugs and buffer overflows (a20082c3-6255-11d8-80e3-0020ed76ef5a)

Ulf Harnhammar reported four bugs in metamail: two are format string bugs and two are buffer overflows. The bugs are in SaveSquirrelFile, PrintHeader, and ShareThisHeader. These vulnerabilities could be triggered by a maliciously formatted email message if metamail' or splitmail' is used to proce...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : xine-lib vulnerability (USN-746-1)

It was discovered that the 4xm demuxer in xine-lib did not correctly handle a large currenttrack value in a 4xm file, resulting in an integer overflow. If a user or automated system were tricked into opening a specially crafted 4xm movie file, an attacker could crash xine-lib or possibly execute...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : enscript vulnerability (USN-660-1)

Ulf Harnhammar discovered multiple stack overflows in enscript's handling of special escape arguments. If a user or automated system were tricked into processing a malicious file with the '-e' option enabled, a remote attacker could execute arbitrary code or cause enscript to crash, possibly...

FreeBSD : ecartis buffer overflows and input validation bugs (3e9be8c4-8192-11d8-9645-0020ed76ef5a)

Timo Sirainen reports multiple buffer overflows that may be triggered while parsing messages, as well as input validation errors that could result in disclosure of mailing list passwords. These bugs were resolved in the August 2003 snapshot of ecartis. %NASLMINLEVEL 70300 C Tenable Network...

FreeBSD : uudeview buffer overflows (6c7661ff-7912-11d8-9645-0020ed76ef5a)

The authors of UUDeview report repairing two buffer overflows in their software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors...

Fedora 10 : ghostscript-8.63-6.fc10 (2009-3709)

This update fixes several security flaws: CVE-2009-0792 multiple integer overflows and missing upper-bounds checks in icclib, CVE-2009-0196 missing boundary check in jbig2dec library, and CVE-2008-6679 buffer overflow in pdfwrite device. Note that Tenable Network Security has extracted the...

FreeBSD : SoX buffer overflows when handling .WAV files (3e4ffe76-e0d4-11d8-9b0a-000347a4fa7d)

Ulf Harnhammar discovered a pair of buffer overflows in the WAV file handling code of SoX. If an attacker can cause her victim to process a specially crafted WAV file with SoX e.g. through social engineering or through some other program that relies on SoX, arbitrary code can be executed with the...

SOL9990 - icclib vulnerabilities CVE-2009-0583 and CVE-2009-0584

Description Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as multiple insufficient input validation flaws, were found in Ghostscript's International Color Consortium Format library icclib. Using specially-crafted ICC profiles, an attacker could create a...

GLSA-200904-19 : LittleCMS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200904-19 LittleCMS: Multiple vulnerabilities RedHat reported a NULL pointer dereference flaw while processing monochrome ICC profiles CVE-2009-0793. Chris Evans of Google discovered the following vulnerabilities: LittleCMS contai...

FreeBSD : xpdf -- multiple vulnerabilities (a21037d5-2c38-11de-ab3b-0017a4cccfc6)

Secunia reports : Some vulnerabilities have been reported in Xpdf, which can be exploited by malicious people to potentially compromise a user's system. A boundary error exists when decoding JBIG2 symbol dictionary segments. This can be exploited to cause a heap-based buffer overflow and...

FreeBSD Ports: freetype2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Core 10 FEDORA-2009-3709 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory FEDORA-2009-3709. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Ubuntu USN-757-1 (gs-gpl)

The remote host is missing an update to gs-gpl announced via advisory USN-757-1. OpenVAS Vulnerability Test $Id: ubuntu7571.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7571.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-757-1 gs-gpl Authors: Thomas Rein...

Fedora Core 9 FEDORA-2009-3710 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory FEDORA-2009-3710. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Ubuntu: Security Advisory (USN-757-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LittleCMS: Multiple vulnerabilities

Background LittleCMS, or short lcms, is a color management system for working with ICC profiles. It is used by many applications including GIMP and Firefox. Description RedHat reported a null-pointer dereference flaw while processing monochrome ICC profiles CVE-2009-0793. Chris Evans of Google...