Secunia Research: Adobe PageMaker PMD File Processing Buffer Overflows

====================================================================== Secunia Research 29/10/2008 - Adobe PageMaker PMD File Processing Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Trend Micro OfficeScan CGI Parsing Buffer Overflows

====================================================================== Secunia Research 22/10/2008 - Trend Micro OfficeScan CGI Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

OpenOffice < 2.4.2 WMF and EMF File Handling Buffer Overflows

The version of OpenOffice 2.x installed on the remote host is earlier than 2.4.2. Such versions are affected by several issues : - Specially crafted WMF files can lead to heap-based overflows and arbitrary code execution CVE-2008-2237. - Specially crafted EMF files can lead to heap-based overflow...

OpenOffice < 2.4.2 WMF and EMF File Handling Buffer Overflows

Binary data 4727.prm...

Immunity Canvas: GOODTECH_SSH

Name| goodtechssh ---|--- CVE| CVE-2008-4726 Exploit Pack| CANVAS Description| Goodtech SSH overflow Notes| CVE Name: CVE-2008-4726 VENDOR: Goodtech Notes: Buffer overflows exist in the following GoodTech SSH server commands:...

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

DEBIAN-CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

CVE-2008-4686

CVE-2008-4686 affects VideoLAN VLC Media Player, describing multiple integer overflows in the TY demux plugin (ty.c) of the TiVo demuxer. The vulnerability could allow remote attackers to execute arbitrary code via a crafted .ty file, likely affecting VLC 0.9.0 through 0.9.4; this is a distinct i...

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

CVE-2008-4686

Multiple integer overflows in ty.c in the TY demux plugin aka the TiVo demuxer in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty file, a different vulnerability than CVE-2008-4654...

[Backports-security-announce] Security Update for libspf2

Gerfried Fuchs uploaded new packages for libspf2 which fixed the following security problem: CVE-2008-2469 Fix buffer overflows in DNS response parsing. For the etch-backports distribution the problem has been fixed in version 1.2.5.dfsg-5+lenny1bpo40+1. For the lenny distribution the problem has...

[Backports-security-announce] Security Update for libspf2

Gerfried Fuchs uploaded new packages for libspf2 which fixed the following security problem: CVE-2008-2469 Fix buffer overflows in DNS response parsing. For the etch-backports distribution the problem has been fixed in version 1.2.5.dfsg-5+lenny1bpo40+1. For the lenny distribution the problem has...

Fedora 8 : cups-1.3.9-1.fc8 (2008-8801)

Security release. This updates to 1.3.9 and fixes three integer overflows in the CUPS text and image filters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

DEBIAN-CVE-2008-4575

Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service crash via 1 a long -cmd argument and 2 unspecified vectors related to "a bunch of potential string overflows."...

CVE-2008-4575

Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service crash via 1 a long -cmd argument and 2 unspecified vectors related to "a bunch of potential string overflows."...

CVE-2008-4575

Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service crash via 1 a long -cmd argument and 2 unspecified vectors related to "a bunch of potential string overflows."...

CVE-2008-3477

Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to...

Integer overflow

Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an Office document with an embedded object, which allows remote attackers to execute arbitrary code via an Excel file containing a crafted value, leading to...

CVE-2008-3477

CVE-2008-3477 affects Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2/SP3, in which the VBA Performance Cache handling of embedded objects can be abused to execute arbitrary code. The root cause is from heap-based and other memory corruptions (overflow/invalid indexing) when processing an object...