CVE-2008-4218

Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to 1 i386setldt or 2 i386getldt...

[ GLSA 200812-18 ] JasPer: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200812-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200812-18 : JasPer: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-18 JasPer: User-assisted execution of arbitrary code Marc Espie and Christian Weisgerber have discovered multiple vulnerabilities in JasPer: Multiple integer overflows might allow for insufficient memory allocation, leading...

JasPer: User-assisted execution of arbitrary code

Background The JasPer Project is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 jpeg2k standard. Description Marc Espie and Christian Weisgerber have discovered multiple vulnerabilities in JasPer: Multiple integer...

GLSA-200812-13 : OpenOffice.org: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-13 OpenOffice.org: Multiple vulnerabilities Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files CVE-2008-2238 were discovered. Dmitry E. Oboukhov also reported an insecure temporary file...

Debian DSA-1685-1 : uw-imap - buffer overflows, NULL pointer dereference

Two vulnerabilities have been found in uw-imap, an IMAP implementation. The Common Vulnerabilities and Exposures project identifies the following problems : It was discovered that several buffer overflows can be triggered via a long folder extension argument to the tmail or dmail program. This...

Multiple security vulnerabilities in different antiviral applications

ClamAV: LZH DoS; BitDefender: multiple integer overflow on PE parsing; Avast: multiple buffer overflows on ISO and RPM parsing; AVG: crash on UPX files; Sophos: multiple DoS on different compressed formats parsing; F-Secure F-prot: protection bypass...

[SECURITY] [DSA 1685-1] New uw-imap packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1685-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 12, 2008 http://www.debian.org/security/faq -...

OpenOffice.org: Multiple vulnerabilities

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files...

DSA-1685-1 uw-imap - multiple vulnerabilities

Bulletin has no description...

GLSA-200812-11 : CUPS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-11 CUPS: Multiple vulnerabilities Several buffer overflows were found in: The readrle16 function in imagetops CVE-2008-3639, found by regenrecht, reported via ZDI The WriteProlog function in texttops CVE-2008-3640, found by...

CVE-2008-4254

CVE-2008-4254 describes a remote code execution vulnerability in the Microsoft Visual Basic 6.0 Runtime Extended Files Hierarchical FlexGrid ActiveX control (mshflxgd.ocx). The issue arises from multiple integer overflows in the Hierarchical FlexGrid control when manipulating the Rows/Cols proper...

CUPS: Multiple vulnerabilities

Background CUPS is the Common Unix Printing System. Description Several buffer overflows were found in: The readrle16 function in imagetops CVE-2008-3639, found by regenrecht, reported via ZDI The WriteProlog function in texttops CVE-2008-3640, found by regenrecht, reported via ZDI The...

Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows

====================================================================== Secunia Research 09/12/2008 - Microsoft Hierarchical FlexGrid Control Integer Overflows - ====================================================================== Table of Contents Affected...

Debian Security Advisory DSA 1683-1 (streamripper)

The remote host is missing an update to streamripper announced via advisory DSA 1683-1. OpenVAS Vulnerability Test $Id: deb16831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1683-1 streamripper Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

openSUSE 10 Security Update : ndiswrapper (ndiswrapper-5833)

The ndiswrapper was updated to fix multiple buffer overflows that can be exploited over a connected WLAN by using long ESSID stings. CVE-2008-4395 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

Gentoo Security Advisory GLSA 200812-02 (enscript)

The remote host is missing updates announced in advisory GLSA 200812-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200812-02 (enscript)

The remote host is missing updates announced in advisory GLSA 200812-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 1670-1 (enscript)

The remote host is missing an update to enscript announced via advisory DSA 1670-1. OpenVAS Vulnerability Test $Id: deb16701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1670-1 enscript Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200812-02 : enscript: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-02 enscript: User-assisted execution of arbitrary code Two stack-based buffer overflows in the readspecialescape function in src/psgen.c have been reported. Ulf Harnhammar of Secunia Research discovered a vulnerability...