CVE-2008-0660

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long 1 ExtractExif and 2 ExtractIptc...

Stack overflow

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long 1 ExtractExif and 2 ExtractIptc...

CVE-2008-0660

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long 1 ExtractExif and 2 ExtractIptc...

CVE-2008-0660

The CVE-2008-0660 vulnerability affects the Aurigma Image Uploader ActiveX control (ImageUploader4.ocx: 4.6.17.0, 4.5.70.0, 4.5.126.0 and ImageUploader5: 5.0.10.0) as used by Facebook PhotoUploader 4.5.57.0. It is caused by stack-based buffer overflows in the ExtractExif and ExtractIptc propertie...

Stack overflow

Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWorld 2.6.1.29 aka Lianzong Game Platform allow remote attackers to execute arbitrary code via long arguments to the 1 hgsstartGame and 2 hgsstartNotify methods...

Yahoo! Music Jukebox ActiveX Controls Buffer Overflows

The remote host contains the 'DataGrid' and/or 'MediaGrid' ActiveX controls included with Yahoo! Music Jukebox. These controls are reportedly affected by multiple buffer overflows involving, for example, the 'AddButton' and 'AddImage' methods of the 'DataGrid' control and 'AddBitmap' method of th...

SAPlpd LPD server multiple security vulnerabilities

Multiple buffer overflows and DoS conditions on lpd commands...

Doomsday: Multiple vulnerabilities

Background The Doomsday Engine deng is a modern gaming engine for popular ID games like Doom, Heretic and Hexen. Description Luigi Auriemma discovered multiple buffer overflows in the DNetPlayerEvent function, the MsgWrite function and the NetSvReadCommands function. He also discovered errors whe...

openSUSE 10 Security Update : cairo (cairo-4947)

This update of cairo fixes several integer overflows while decoding PNG images. This can be exploited remotely with user-assistance to execute arbitrary code. CVE-2007-5503 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Debian DSA-1480-1 : poppler - several vulnerabilities

Alin Rad Pop discovered several buffer overflows in the Poppler PDF library, which could allow the execution of arbitrary code if a malformed PDF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

KLA10407 ACE vulnerability in Yahoo! Music Jukebox

Buffer overflows were found in Yahoo! Music Jukebox. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed arguments to different methods. Original advisories - Exploitation Public exploits exist for thi...

CVE-2008-0586

Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the 1 lchangevg, 2 ldeletepv, 3 putlvodm, 4 lvaryoffvg, and 5 lvgenminor programs in bos.rte.lvm; and the 6 tellclvmd program in bos.clvm.enh...

CVE-2008-0586

Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the 1 lchangevg, 2 ldeletepv, 3 putlvodm, 4 lvaryoffvg, and 5 lvgenminor programs in bos.rte.lvm; and the 6 tellclvmd program in bos.clvm.enh...

CVE-2008-0584

Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the 1 swap, 2 swapoff, and 3 swapon programs...

CVE-2007-5602

Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the 1 svocx.ocx ActiveX control or the 2 npsview.dll plugin for Mozilla and Firefox...

DSA-1480-1 poppler - several vulnerabilities

Bulletin has no description...

CVE-2007-5602

Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execute arbitrary code via unspecified vectors to the 1 svocx.ocx ActiveX control or the 2 npsview.dll plugin for Mozilla and Firefox...

Debian: Security Advisory (DSA-1480-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Yahoo! Music Jukebox YMP Datagrid ActiveX control stack buffer overflows

Overview The Yahoo! Music Jukebox YMP Datagrid ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes...

CVE-2007-6699

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...