PHP: Multiple vulnerabilities

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description Several vulnerabilities were found in PHP, most of them during the Month Of PHP Bugs MOPB by Stefan Esser. The most severe of these...

CVE-2007-2852

Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during 1 delete/disinfect or 2 rename operations via a crafted directory name...

CVE-2007-2852

CVE-2007-2852 affects ESET NOD32 Antivirus prior to 2.70.37.0. It describes two stack-based buffer overflows triggered during delete/disinfect or rename operations via a crafted directory name, enabling remote code execution. A fix is available in version 2.70.37.0; upgrading to that version or a...

CVE-2007-2823

Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width. NOTE: some of the details were obtained from third party information...

Stack overflow

Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control AxKSignSWAT.dll 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the 1 SWATInit, 2 SWATInitEx, 3 SWATInitEx2, 4 SWATInitEx3, and 5 SWATLogin functions...

CVE-2007-2823

Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width. NOTE: some of the details were obtained from third party information...

CVE-2007-2820

Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control AxKSignSWAT.dll 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the 1 SWATInit, 2 SWATInitEx, 3 SWATInitEx2, 4 SWATInitEx3, and 5 SWATLogin functions...

Stack overflow

Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control IMW32O40.OCX 4.00.041 allow remote attackers to execute arbitrary code via 1 a long FileName parameter, or unspecified vectors involving the 2 BeginReport, 3 CreatePictureExA, 4 DefineImage, 5 DefineImageEx, 6...

CVE-2007-2814

Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control IMW32O40.OCX 4.00.041 allow remote attackers to execute arbitrary code via 1 a long FileName parameter, or unspecified vectors involving the 2 BeginReport, 3 CreatePictureExA, 4 DefineImage, 5 DefineImageEx, 6...

CVE-2007-2814

The vulnerability CVE-2007-2814 affects the Pegasus ImagN’ ActiveX control IMW32O40.OCX (version 4.00.041). The issue comprises multiple stack-based buffer overflows that could allow remote code execution. Exploitation vectors include a long FileName parameter and several functions such as BeginR...

CVE-2007-2758

Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that contains long directory names in a deeply nested directory structure, which triggers 1 a stack-based buffer overflow during extraction, or 2 a heap-based buffer...

CA BrightStor ARCserve backup system multiple buffer overflows

Multiple buffer overflows in RPC-based Media Server service...

CVE-2007-1173

Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...

CVE-2007-2568

Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via a long 1 tag or 2 track type in a CUE file...

CVE-2007-1173

Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...

CVE-2007-2568

VCDGear 3.55 contains multiple stack-based buffer overflows in the CUE file parser, exploitable via a long (1) tag or (2) track type in a CUE file. This enables user‑assisted remote code execution. The provided documents do not include a remediation or patched version.

SOL1882 - Buffer Overflows in DNS Resolver Libraries vulnerability CAN-2002-19

CERT has released an advisory regarding a buffer overflow in the way that stub resolvers handle DNS responses. Malicious users could use this exploit to cause a denial-of-service DoS attack or possibly run arbitrary code on the system. For more information about this advisory, refer to the...

Samba file server multiple security vulnerabilities

Multiple heap based buffer overflows, invalid SID to uid translation privilege escalation, shell characters problem...

CVE-2007-2652

Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors involving certain 1 sprintf and 2 vsprintf calls in a rindex.c, b rreports.c, c rtopsites.c, d rtopuser.c, e rtypical.c, f ruserdatetime.c, and g rusers.c in...

CVE-2007-2652

Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors involving certain 1 sprintf and 2 vsprintf calls in a rindex.c, b rreports.c, c rtopsites.c, d rtopuser.c, e rtypical.c, f ruserdatetime.c, and g rusers.c in...