9936 matches found
CVE-2007-2116
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors, aka DB10. NOTE: as of 20070424, Oracle has not disputed claims that these are buffer overflows in kkzi.o for the SYS.DBMSSNAPINTERNAL package...
CVE-2007-2116
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors, aka DB10. NOTE: as of 20070424, Oracle has not disputed claims that these are buffer overflows in kkzi.o for the SYS.DBMSSNAPINTERNAL package...
security flaw
Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...
INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows
INFIGO IS Security Advisory ADV-2007-04-01 http://www.infigo.hr/ Title: Enterprise Security Analyzer server remote buffer overflows Advisory ID: INFIGO-2007-08 Date: 2007-04-05 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2006-08-04 Impact: Remote code execution preauth Risk...
CVE-2007-1559
Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via 1 unspecified long property values to SonicMediaPlayer.dll or 2 long arguments to unspecified methods in SonicMediaPlayer.dll...
CVE-2007-1559
CVE-2007-1559 affects Roxio CinePlayer 3.2, involving stack-based buffer overflows in SonicMediaPlayer.dll (and related SonicDVDDashVRNav.dll) that allow remote code execution. The documented vectors involve overly long values in SonicMediaPlayer.dll (DiskType method) or other long arguments to S...
CVE-2007-1559
Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via 1 unspecified long property values to SonicMediaPlayer.dll or 2 long arguments to unspecified methods in SonicMediaPlayer.dll...
CVE-2007-1955
Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the 1 DownloadCert, 2 DecryptFileByKey, and 3 EncryptFileByKey functions, a different module and vectors th...
Internet Pictures Corporation iPIX Image Well ActiveX controls contain buffer overflows
Overview The Internet Pictures Corporation iPIX Image Well ActiveX controls contain buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Internet Pictures Corporation has produced equipment and software to create 360...
CVE-2007-1001
Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...
CVE-2007-1001
Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...
CVE-2007-1001
CVE-2007-1001 is a heap-based buffer overflow in PHP’s gd extension (WBMP handling) that can allow arbitrary code execution when processing WBMP images from untrusted sources. The issue affects PHP 4.0.0–4.4.6 and 5.0.0–5.2.1. Connected advisories confirm it as a PHP/gd-related vulnerability; a p...
CVE-2007-1001
Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...
Fedora Core 6 : ImageMagick-6.2.8.0-4.fc6 (2007-413)
Thu Apr 5 2007 Norm Murray - 6.2.8.0-4.fc6 - fix more overflows 235075, CVE-2007-1797 - fix icon conversions 206873 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...
CVE-2007-1001
Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...
Several Windows image viewers vulnerabilities
I made a small research covering security of several Windows offline image viewers. Although, when discussing security of image viewing software, web browsers are usually implied, since they will be on the 'front lines' in the unsafe environment such as the Internet, this research lists several...
SAP RFC library multiple security vulnerabilities
Buffer overflows, DoS conditions and information leak in TRUSTEDSYSTEMSECURITY, RFCSTARTPROGRAM, RFCSTARTGUI, SYSTEMCREATEINSTANCE, RFCSETREGSERVERPROPERTY...
Mandrake Linux Security Advisory : freetype2 (MDKSA-2007:081-1)
iDefense integer overflows in the way freetype handled various font files. A malicious local user could exploit these issues to potentially execute arbitrary code. Updated packages have been patched to correct this issue. Update : Packages for Mandriva Linux 2007.1 are now available. %NASLMINLEVE...
Fedora Core 6 : openoffice.org-2.0.4-5.5.17 (2007-376)
CVE-2007-0239 rhbz228008 potential shell escape problem in some hyperlinks CVE-2007-0238 rhbz226966 potential buffer overflows in calc legacy file format Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...