GLSA-200812-13 : OpenOffice.org: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-13 OpenOffice.org: Multiple vulnerabilities Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files CVE-2008-2238 were discovered. Dmitry E. Oboukhov also reported an insecure temporary file...

Debian DSA-1685-1 : uw-imap - buffer overflows, NULL pointer dereference

Two vulnerabilities have been found in uw-imap, an IMAP implementation. The Common Vulnerabilities and Exposures project identifies the following problems : It was discovered that several buffer overflows can be triggered via a long folder extension argument to the tmail or dmail program. This...

Multiple security vulnerabilities in different antiviral applications

ClamAV: LZH DoS; BitDefender: multiple integer overflow on PE parsing; Avast: multiple buffer overflows on ISO and RPM parsing; AVG: crash on UPX files; Sophos: multiple DoS on different compressed formats parsing; F-Secure F-prot: protection bypass...

[SECURITY] [DSA 1685-1] New uw-imap packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1685-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 12, 2008 http://www.debian.org/security/faq -...

OpenOffice.org: Multiple vulnerabilities

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files...

DSA-1685-1 uw-imap - multiple vulnerabilities

Bulletin has no description...

GLSA-200812-11 : CUPS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-11 CUPS: Multiple vulnerabilities Several buffer overflows were found in: The readrle16 function in imagetops CVE-2008-3639, found by regenrecht, reported via ZDI The WriteProlog function in texttops CVE-2008-3640, found by...

CVE-2008-4254

CVE-2008-4254 describes a remote code execution vulnerability in the Microsoft Visual Basic 6.0 Runtime Extended Files Hierarchical FlexGrid ActiveX control (mshflxgd.ocx). The issue arises from multiple integer overflows in the Hierarchical FlexGrid control when manipulating the Rows/Cols proper...

Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows

====================================================================== Secunia Research 09/12/2008 - Microsoft Hierarchical FlexGrid Control Integer Overflows - ====================================================================== Table of Contents Affected...

Debian Security Advisory DSA 1683-1 (streamripper)

The remote host is missing an update to streamripper announced via advisory DSA 1683-1. OpenVAS Vulnerability Test $Id: deb16831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1683-1 streamripper Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

CUPS: Multiple vulnerabilities

Background CUPS is the Common Unix Printing System. Description Several buffer overflows were found in: The readrle16 function in imagetops CVE-2008-3639, found by regenrecht, reported via ZDI The WriteProlog function in texttops CVE-2008-3640, found by regenrecht, reported via ZDI The...

openSUSE 10 Security Update : ndiswrapper (ndiswrapper-5833)

The ndiswrapper was updated to fix multiple buffer overflows that can be exploited over a connected WLAN by using long ESSID stings. CVE-2008-4395 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

Gentoo Security Advisory GLSA 200812-02 (enscript)

The remote host is missing updates announced in advisory GLSA 200812-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200812-02 (enscript)

The remote host is missing updates announced in advisory GLSA 200812-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 1670-1 (enscript)

The remote host is missing an update to enscript announced via advisory DSA 1670-1. OpenVAS Vulnerability Test $Id: deb16701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1670-1 enscript Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200812-02 : enscript: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-02 enscript: User-assisted execution of arbitrary code Two stack-based buffer overflows in the readspecialescape function in src/psgen.c have been reported. Ulf Harnhammar of Secunia Research discovered a vulnerability...

openSUSE 10 Security Update : jasper (jasper-5771)

Multiple, potentially dangerous integer overflows, buffer overflows and a problem with temporary files have been fixed CVE-2008-3520, CVE-2008-3521, CVE-2008-3522. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2008-5282

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

Stack overflow

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

CVE-2008-5279

The Local ZIM Server zcs.exe in Zilab Chat and Instant Messaging ZIM Server 2.1 and earlier allow remote attackers to execute arbitrary code via 1 heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and 2 a stack-based buffer overflow with ...