9936 matches found
libTIFF: Multiple vulnerabilities
Background libTIFF provides support for reading and manipulating TIFF images. Description Tavis Ormandy of the Google Security Team discovered several heap and stack buffer overflows and other flaws in libTIFF. The affected parts include the TIFFFetchShortPair, TIFFScanLineSize and...
GLSA-200607-13 : Audacious: Multiple heap and buffer overflows
The remote host is affected by the vulnerability described in GLSA-200607-13 Audacious: Multiple heap and buffer overflows Luigi Auriemma has found that the adplug library fails to verify the size of the destination buffers in the unpacking instructions, resulting in various possible heap and...
CVE-2006-3459
Multiple stack-based buffer overflows in the TIFF library libtiff before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdircount value in the...
CVE-2006-3459
Multiple stack-based buffer overflows in the TIFF library libtiff before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdircount value in the...
CVE-2006-3459
The CVE-2006-3459 issue is a buffer overflow in the libtiff library (libtiff) prior to 3.8.2, used by Adobe Reader 9.3.0 and other products. The underlying flaw arises in TIFF parsing code (TIFFFetchShortPair in tif_dirread.c) when handling large tdir_count values, enabling context-dependent atta...
CVE-2006-3459
Multiple stack-based buffer overflows in the TIFF library libtiff before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdircount value in the...
security flaw
Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...
[SECURITY] [DSA 1137-1] New tiff packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1137-1 [email protected] http://www.debian.org/security/ Martin Schulze August 2nd, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1136-1] New gpdf packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1136-1 [email protected] http://www.debian.org/security/ Martin Schulze August 2nd, 2006 http://www.debian.org/security/faq -...
DSA-1136-1 gpdf - wrong input sanitising
Bulletin has no description...
CVE-2006-3941
Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause a denial of service grid service shutdown and possibly execute arbitrary code using buffer overflows via unknown vectors that cause 1 qmaster or 2 execd to terminate...
CVE-2006-3941
Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause a denial of service grid service shutdown and possibly execute arbitrary code using buffer overflows via unknown vectors that cause 1 qmaster or 2 execd to terminate...
CVE-2006-3941
CVE-2006-3941 affects Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0. The advisory describes an unspecified vulnerability in the daemons that can cause denial of service (grid service shutdown) and may allow arbitrary code execution via buffer overflows, impacting either qmaster or execd processes...
security flaw
Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...
Audacious: Multiple heap and buffer overflows
Background Audacious is a media player that has been forked from Beep Media Player. Description Luigi Auriemma has found that the adplug library fails to verify the size of the destination buffers in the unpacking instructions, resulting in various possible heap and buffer overflows. Impact An...
security flaw
Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...
GLSA-200607-09 : Wireshark: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200607-09 Wireshark: Multiple vulnerabilities Wireshark dissectors have been found vulnerable to a large number of exploits, including off-by-one errors, buffer overflows, format string overflows and an infinite loop. Impact :...
CVE-2006-3811
Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via Javascript that leads to memory corruption, including 1...
DEBIAN-CVE-2006-3811
Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via Javascript that leads to memory corruption, including 1...
CVE-2006-3811
Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via Javascript that leads to memory corruption, including 1...