Mozilla Foundation Security Advisory 2006-74

Mozilla Foundation Security Advisory 2006-74 Title: Mail header processing heap overflows Impact: Critical Announced: December 19, 2006 Reporter: Georgi Guninski, David Bienvenu Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 1.5.0.9 SeaMonkey 1.0.7 Description Georgi Guninski reported tha...

Multiple Mozilla Firefox / Thunderbird / Seamonkey security vulnerabilities

Crossite scripting with functions prototypes. Information leak. Buffer overflows on oversized Content-Type fields in messages. Memory corruption on SVG header. Crossite scripting with img.src. DoS. JavaScript watchpoint privilege escalation. CSS image cursor property buffer overflow. Multiple...

NOD32 Antivirus < 1.1743 Multiple File Processing Vulnerabilities

The version of NOD32 installed on the remote host reportedly has a heap overflows involving processing of '.doc' and '.cab' files and a divide-by-zero flaw involving '.chm' files. A remote attacker may be able to leverage the first flaw to execute code remotely or crash the affected service. C...

CVE-2006-6106

Multiple buffer overflows in the cmtprecvinteropmsg function in the Bluetooth driver net/bluetooth/cmtp/capi.c in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via CAPI...

CVE-2006-6106

Multiple buffer overflows in the cmtprecvinteropmsg function in the Bluetooth driver net/bluetooth/cmtp/capi.c in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via CAPI...

Mandrake Linux Security Advisory : libtunepimp (MDKSA-2006:126)

Kevin Kofler discovered multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp 0.4.2 that allow remote user-complicit attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2006:155)

Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images. CVE-2006-3743 Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun bitmap images that...

CVE-2006-6584

Multiple buffer overflows in italkplus Italk+ before 0.92.1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified vectors...

Coolplayer buffer overflows

Multiple buffer overflows...

CVE-2006-6539

Multiple buffer overflows in Winamp Web Interface Wawi 7.5.13 and earlier 1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an a long username or a b crafted packet to the FindBasicAuth function in security.cpp, related to the /browse...

CVE-2006-6539

Multiple buffer overflows in Winamp Web Interface Wawi 7.5.13 and earlier 1 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an a long username or a b crafted packet to the FindBasicAuth function in security.cpp, related to the /browse...

GLSA-200612-04 : ModPlug: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200612-04 ModPlug: Multiple buffer overflows Luigi Auriemma has reported various boundary errors in loadit.cpp and a boundary error in the 'CSoundFile::ReadSample' function in sndfile.cpp. Impact : A remote attacker can entice a...

Multiple Symantec Veritas NetBackup security vulnerabilities

CONNECTOPTIONS and oversized requests to bpcd.exe buffer overflows...

CVE-2006-6335

Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via 1 a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and 2 a CPIO...

CVE-2006-6335

Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via 1 a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and 2 a CPIO...

Winamp Web Interface multiplse security vulnerabilities

Buffer overflows, directory traversal and protection bypass...

GLSA-200612-01 : wv library: Multiple integer overflows

The remote host is affected by the vulnerability described in GLSA-200612-01 wv library: Multiple integer overflows The wv library fails to do proper arithmetic checks in multiple places, possibly leading to integer overflows. Impact : An attacker could craft a malicious file that, when handled...

ModPlug: Multiple buffer overflows

Background ModPlug is a library for playing MOD-like music. Description Luigi Auriemma has reported various boundary errors in loadit.cpp and a boundary error in the "CSoundFile::ReadSample" function in sndfile.cpp. Impact A remote attacker can entice a user to read crafted modules or ITP files,...

Mozilla Firefox: Multiple vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla Project. Description Mozilla Firefox improperly handles Script objects while they are being executed. Mozilla Firefox has also been found to be vulnerable to various possible buffer overflows. Lastly, the binary...

IBM Tivoli Storage Manager多个缓冲区溢出漏洞

IBM Tivoli Storage Manager是一款用于系统备份和恢复的解决方案。 IBM Tivoli Storage Manager存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务或缓冲区溢出攻击。 问题一： 初始化sign-on请求包含指定语言的字段，在一般情况下字符串是dscenu.txt，通常情况下服务器验证的语言字符串不超过0x100字节，但是，如果语言字符串第一个字节为0x18，那么这个检查将不发生，而造成固定的缓冲区被溢出。 问题二和三：...