USN-424-2: PHP regression

USN-424-1 fixed vulnerabilities in PHP. However, some upstream changes were not included, which caused errors in the stream filters. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple buffer overflows have been discovered in various PHP modules...

CVE-2007-1344

Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the 1 urlParse function, which causes a stack-based overflow and the 2 ReplaceString function, which causes a heap-based overflow...

Ipswitch IMail Server < 2006.2 Multiple Overflows

Binary data 3937.prm...

GLSA-200703-07 : STLport: Possible remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200703-07 STLport: Possible remote execution of arbitrary code Two buffer overflows have been discovered, one in 'print floats' and one in the rope constructor. Impact : Both of the buffer overflows could result in the remote...

Ipswitch IMail Server < 2006.2 Multiple Remote Overflows

The remote host is running Ipswitch Collaboration Suite / IMail, commercial messaging and collaboration suites for Windows. According to its banner, the version of Ipswitch Collaboration Suite / IMail installed on the remote host has several unspecified buffer overflows in various service...

Ipswitch IMail Server < 2006.2 Multiple Overflows

Binary data 3938.prm...

Ipswitch IMail Server < 2006.2 Multiple Overflows

Binary data 3936.prm...

QuickTime < 7.1.5 Multiple Vulnerabilities (Windows)

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows. An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a...

STLport: Possible remote execution of arbitrary code

Background STLport is a multi-platform C++ Standard Library implementation. Description Two buffer overflows have been discovered, one in "print floats" and one in the rope constructor. Impact Both of the buffer overflows could result in the remote execution of arbitrary code. Please note that th...

Multiple PHP bugs

Buffer overflows, integer overflows, DoS conditions, crossite scripting...

Multiple PHP security vulnerabilities

Crossite scripting, DoS, protection bypass, buffer overflows...

CVE-2002-2225

SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly involving buffer overflows using 1 a large Security Parameter Index SPI field, 2 a large number of payloads, or 3 a long...

Mozilla libnss multiple security vulnerabilities

Buffer overflows and integer overflows in SSL2 client and server code implementation...

CVE-2007-0320

CVE-2007-0320 involves Macrovision’s InstallFromTheWeb product (ActiveX control in iftw.dll and Netscape plug-in in npiftw32.dll). The connected sources document multiple buffer overflows in these components that could allow an attacker to execute arbitrary code via crafted HTML documents, potent...

Mozilla Network Security Services (NSS) SSLv2 buffer overflows — Mozilla

iDefense has informed Mozilla about two potential buffer overflow vulnerabilities found by researcher regenrecht in the Network Security Services NSS code for processing the SSLv2 protocol...

Mercur Messaging 2005 multiple security vulnerabilities

Multiple DoS conditions and buffer overflows...

Heap overflow

Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via 1 long filename in a response to a LIST command, and 2 a long response to a CWD command...

CVE-2007-1080

Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via 1 long filename in a response to a LIST command, and 2 a long response to a CWD command...

CVE-2007-1080

Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via 1 long filename in a response to a LIST command, and 2 a long response to a CWD command...

CVE-2006-6490

Multiple buffer overflows in the SupportSoft 1 SmartIssue tgctlsi.dll and 2 ScriptRunner tgctlsr.dll ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HT...