CVE-2006-3901

Multiple stack-based buffer overflows in Tumbleweed Email Firewall EMF allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a 1 file or 2 directory with a long LHA extended header, 3 an LHA archive in which the "temporary pathname" field for...

CVE-2006-3838

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer ESA before 2.5.0, as used in products including a Sidewinder, b iPolicy Security Manager, c Astaro Report Manager, d Fortinet FortiReporter, e Top Layer Network Security Analyzer, and possibly other products, allow...

CVE-2006-3838

CVE-2006-3838 corresponds to multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0. The vulnerabilities affect ESA components and OEM integrations: the Syslog daemon (syslogserver.exe) accepts long arguments via commands such as DELTAINTERVAL, LOGFOL...

AutoVue SolidModel Professional archiver multiple buffer overflows

Buffer overflows on multiple archive formats handling...

FileCOPA FTP Server multiple buffer overflows

Multiple FTP commands buffer overflows...

Multiple UFO2000 game security vulnerabilities

Memory corruptions, buffer overflows, SQL injections, etc...

Multiple Ethereal / TEthereal / TShark / WireShark security vulnerabilities

Buffer overflows in multiple protocols dessectors...

CVE-2006-3788

CVE-2006-3788 affects UFO2000: Multiple buffer overflows in multiplay.cpp (UFO2000 svn 1057) allow remote code execution via crafted network data in Net::recv_add_unit, Net::recv_rules/recv_select_unit/recv_options/recv_unit_data, and a large GEODATA map structure in Net::recv_map_data. The issue...

CVE-2006-3788

Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code via 1 a long unit name in Net::recvaddunit,; 2 large values to Net::recvrules, Net::recvselectunit, Net::recvoptions, and Net::recvunitdata; and 3 a large mapdata GEODATA structure in...

linux/x86 stdin re-open and /bin/sh exec shellcode

linux/x86 stdin re-open and /bin/sh exec shellcode. Shellcode exploit for linx86 platform / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi Local shellcode for stdin re-open and /bin/sh exec. It closes std...

WinRAR LHA Filename Handling Buffer Overflows

The remote host is running WinRAR, an archive manager for Windows. The version of WinRAR installed on the remote host is affected by two stack-based buffer overflows when processing LHA files with specially- crafted filenames. Successful exploitation of either issue enables an attacker to execute...

CVE-2006-3600

Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp TunePimp 0.4.2 allow remote user-assisted attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3 error strings...

CVE-2006-3600

Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp TunePimp 0.4.2 allow remote user-assisted attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3 error strings...

Mandrake Linux Security Advisory : php (MDKSA-2006:122)

Multiple buffer overflows in the gd graphics library libgd 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function. One instance in gdiodp.c does not appear to be corrected in the...

CVE-2006-3600

Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp TunePimp 0.4.2 allow remote user-assisted attackers to cause a denial of service application crash and possibly execute code via a long 1 Album release date MBEReleaseGetDate, 2 data, or 3 error strings...

Microsoft Works - Buffer Overflows / Denial of Service (DoS)-Vulnerabilities

Microsoft Works - Buffer Overflows / Denial of Service DoS-Vulnerabilities ... discovered by Benjamin Tobias Franz Affected Vendor: Microsoft Affected Product: Microsoft Works Description: Microsoft Works Spreadsheet wksss.exe fails to handle specially crafted files. All supported file formats...

CVE-2006-3581

Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via large 1 DTM and 2 S3M files...

CVE-2006-3582

Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of 1 CFF, 2 MTK, 3 DMO, and 4 U6M files...

CVE-2006-3581

Audacious AdPlug 2.0 and earlier are affected by multiple stack-based buffer overflows when processing DTM and S3M files. The underlying cause is improper handling of file payloads in AdPlug’s decoding paths, enabling remote user‑assisted code execution. Impact: attacker could run arbitrary code ...

CVE-2006-3582

Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of 1 CFF, 2 MTK, 3 DMO, and 4 U6M files...