9936 matches found
CVE-2006-1652
Multiple buffer overflows in a UltraVNC aka Ultr@VNC 1.0.1 and earlier and b tabbedviewer 1.29 1 allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an overflow in Log::ReallyPrin...
[SECURITY] [DSA 1026-1] New sash packages fix potential arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1026-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 6th, 2006 http://www.debian.org/security/faq -...
RHEL 4 : openmotif (RHSA-2006:0272)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0272 advisory. - openmotif libUil buffer overflows CVE-2005-3964 Note that Nessus has not tested for this issue but has instead relied only on the application's...
Ubuntu 4.10 / 5.04 / 5.10 : dia vulnerabilities (USN-266-1)
Three buffer overflows were discovered in the Xfig file format importer. By tricking a user into opening a specially crafted .fig file with dia, an attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the preceding...
Barracuda Spam Firewall multiple buffer overflows
Buffer overflows on LHA and ZOO archive parsing...
Mandrake Linux Security Advisory : dia (MDKSA-2006:062)
Three buffer overflows were discovered by infamous41md in dia's xfig import code. This could allow for user-complicit attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid color index, number of points, or depth. Updated packages have been patched to correct...
CVE-2006-1550
Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...
CVE-2006-1550
Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...
CVE-2006-1550
Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...
CVE-2006-1550
CVE-2006-1550 affects Dia’s xfig import path (xfig-import.c) in Dia 0.87 and newer up to 0.95-pre6, due to multiple buffer overflow flaws triggered by crafted xfig files. Reported vectors involve invalid color index, point count, or depth values. Public advisories (Debian DSA-1025-1, RHSA-2006:02...
CVE-2006-1550
Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...
CVE-2006-1539
Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo Linux might allow local users with games group membership to gain privileges by modifying tetris-bsd.scores to contain crafted executable content, which is executed when another...
CVE-2006-1539
Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo Linux might allow local users with games group membership to gain privileges by modifying tetris-bsd.scores to contain crafted executable content, which is executed when another...
CVE-2006-1539
Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo Linux might allow local users with games group membership to gain privileges by modifying tetris-bsd.scores to contain crafted executable content, which is executed when another...
CVE-2006-1539
Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo Linux might allow local users with games group membership to gain privileges by modifying tetris-bsd.scores to contain crafted executable content, which is executed when another...
CVE-2006-1502
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via 1 a certain ASF file handled by asfheader.c that causes the asfdescrambling function to be passed a negative integer after the conversion from a char t...
GLSA-200603-26 : bsd-games: Local privilege escalation in tetris-bsd
The remote host is affected by the vulnerability described in GLSA-200603-26 bsd-games: Local privilege escalation in tetris-bsd Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that the checkscores function in scores.c reads in the data from the /var/games/tetris-bsd.scores file...
mplayer -- Multiple integer overflows
Secunia reports: The vulnerabilities are caused due to integer overflow errors in "libmpdemux/asfheader.c" within the handling of an ASF file, and in "libmpdemux/aviheader.c" when parsing the "indx" chunk in an AVI file. This can be exploited to cause heap-based buffer overflows via a malicious A...
[Full-disclosure] [xfocus-SD-060329]MPlayer: Multiple integer overflows
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xfocus-SD-060329MPlayer: Multiple integer overflows MPlayer is a media player capable of handling multiple multimedia file formats. XFOCUS team http://www.xfocus.org/ had discovered Multiple integer overflows .Those can lead to a heap-based buffer...