9891 matches found
Fedora Core 5 : ImageMagick-6.2.5.4-4.2.1.fc5.7 (2006-1286)
Security update fixing possible overflows in handling of PALM and DCM images. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
GLSA-200701-07 : OpenOffice.org: EMF/WMF file handling vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200701-07 OpenOffice.org: EMF/WMF file handling vulnerabilities John Heasman of NGSSoftware has discovered integer overflows in the EMRPOLYPOLYGON and EMRPOLYPOLYGON16 processing and an error within the handling of METAESCAPE...
Fedora Core 6 : ImageMagick-6.2.8.0-3.fc6.1 (2006-1285)
Security update fixing possible overflows in handling of PALM and DCM images. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Mac OS X / Apple Finder multiple file system parsing vulnerabilities
Buffer overflow on oversized DMG volume label in Apple Finder. Integer overflows on UFS DMG image parsing. DoS on processing UFS and HFS+ volumes...
CA BrightStor ARCserve Backup Multiple Vulnerabilities (QO84983)
According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple buffer overflows that can be exploited by an unauthenticated, remote attacker to execute arbitrary code on the affected host with SYSTEM privileges. C Tenable Network Security, Inc...
OpenOffice.org: EMF/WMF file handling vulnerabilities
Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description John Heasman of NGSSoftware has discovered integer overflows in the EMRPOLYPOLYGON and...
CVE-2007-0169
Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums 1 0x2F and 2 0x75 in the a Message...
CVE-2007-0169
Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums 1 0x2F and 2 0x75 in the a Message...
CVE-2006-6917
Multiple buffer overflows in Computer Associates CA BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine tapeeng.exe via a crafted RPC request with 1 opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or 2 opnum...
Stack overflow
Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...
CVE-2007-0174
Multiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina UC2006 and earlier allow remote attackers to execute arbitrary code via a long string in the 1 astrVerion parameter to the SendChatRoomOpt function or 2 the astrDownDir parameter to the SendDownLoadFile...
GLSA-200701-04 : SeaMonkey: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200701-04 SeaMonkey: Multiple vulnerabilities An anonymous researcher found evidence of memory corruption in the way SeaMonkey handles certain types of SVG comment DOM nodes. Georgi Guninski and David Bienvenu discovered buffer...
X.org / XFree68 multiple integer overflows
Integer overflow in DBE and Renderer extensions...
SeaMonkey: Multiple vulnerabilities
Background The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'. Description An anonymous researcher found evidence of memory corruption in the way SeaMonkey handles certain types ...
CVE-2004-2673
Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via 1 a SITE ZIP command with a long first or second argument, or 2 a SITE COPY with a long argument...
CVE-2004-2673
This CVE concerns ArGoSoft FTP Server prior to 1.4.1.6. The vulnerability consists of multiple buffer overflows triggered by long arguments in commands SITE ZIP (first or second argument) or SITE COPY, allowing a remote authenticated user to cause a denial of service and potentially execute arbit...
[USN-403-1] X.org vulnerabilities
=========================================================== Ubuntu Security Notice USN-403-1 January 09, 2007 xorg, xorg-server vulnerabilities CVE-2006-6101, CVE-2006-6102, CVE-2006-6103 =========================================================== A security issue affects the following Ubuntu...
Microsoft VML buffer overflow
Buffer overflow and integer overflows on Vector Markup Language parsing. May be used for hidden malware installation...
GLSA-200701-03 : Mozilla Thunderbird: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200701-03 Mozilla Thunderbird: Multiple vulnerabilities Georgi Guninski and David Bienvenu discovered buffer overflows in the processing of long 'Content-Type:' and long non-ASCII MIME headers. Additionally, Frederik Reiss...