9936 matches found
USN-340-1: imagemagick vulnerabilities
Tavis Ormandy discovered several buffer overflows in imagemagick's Sun Raster and XCF Gimp image decoders. By tricking a user or automated system into processing a specially crafted image, this could be exploited to execute arbitrary code with the users' privileges...
Streamripper: Multiple remote buffer overflows
Background Streamripper extracts and records individual MP3 file tracks from SHOUTcast streams. Description Ulf Harnhammar, from the Debian Security Audit Project, has found that Streamripper is vulnerable to multiple stack based buffer overflows caused by improper bounds checking when processing...
CVE-2006-4482
Multiple heap-based buffer overflows in the 1 strrepeat and 2 wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990...
CVE-2006-4482
Multiple heap-based buffer overflows in the 1 strrepeat and 2 wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990...
CVE-2006-4482
Multiple heap-based buffer overflows in the 1 strrepeat and 2 wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990...
Multiple libtiff library vulnerabilities
Multiple buffer overflows on TIFF images parsing, endless loop, integer overflows, memory corruption...
[SECURITY] [DSA 1162-1] New libmusicbrainz packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1162-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2006 http://www.debian.org/security/faq -...
DSA-1162 libmusicbrainz-2.0 - buffer overflows
Bulletin has no description...
GLSA-200608-24 : AlsaPlayer: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200608-24 AlsaPlayer: Multiple buffer overflows AlsaPlayer contains three buffer overflows: in the function that handles the HTTP connections, the GTK interface, and the CDDB querying mechanism. Impact : An attacker could exploit...
[SECURITY] [DSA 1160-1] New Mozilla packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1160-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2006 http://www.debian.org/security/faq -...
CVE-2006-4431
Multiple buffer overflows in the a Session Clustering Daemon and the b modcluster module in the Zend Platform 2.2.1 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via a 1 empty or 2 crafted PHP session identifier PHPSESSID...
CVE-2006-4431
CVE-2006-4431 affects Zend Platform (Session Clustering Daemon) and the mod_cluster module; versions 2.2.1 and earlier are vulnerable. The issue is multiple buffer overflows triggered by a PHPSESSID that is empty or crafted, allowing remote attackers to crash the service (DoS) or potentially exec...
[SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 1159-1 [email protected] http://www.debian.org/security/ Martin Schulze August 28th, 2006 http://www.debian.org/security/faq -...
CVE-2006-4364
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via long strings that contain '@' characters in the 1 USER and 2 APOP commands...
AlsaPlayer: Multiple buffer overflows
Background AlsaPlayer is a heavily multithreaded PCM player that tries to utilize ALSA utilities and drivers. As of June 2004, the project is inactive. Description AlsaPlayer contains three buffer overflows: in the function that handles the HTTP connections, the GTK interface, and the CDDB queryi...
CVE-2006-4364
CVE-2006-4364 affects Alt-N Technologies’ MDaemon POP3 server prior to version 9.0.6. The vulnerability is due to multiple heap-based buffer overflows triggered by long strings containing '@' characters in the USER and APOP commands. Exploitation can cause a daemon crash (DoS) and may allow remot...
CVE-2006-4364
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via long strings that contain '@' characters in the 1 USER and 2 APOP commands...
CVE-2006-3744
Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile bitmap images that trigger heap-based buffer overflows...