9936 matches found
GLSA-200601-02 : KPdf, KWord: Multiple overflows in included Xpdf code
The remote host is affected by the vulnerability described in GLSA-200601-02 KPdf, KWord: Multiple overflows in included Xpdf code KPdf and KWord both include Xpdf code to handle PDF files. This Xpdf code is vulnerable to several heap overflows GLSA 200512-08 as well as several buffer and integer...
Ubuntu 4.10 : imlib+png2 vulnerabilities (USN-53-1)
Pavel Kankovsky discovered several buffer overflows in imlib. If an attacker tricked a user into loading a malicious image, he could exploit this to execute arbitrary code in the context of the user opening the image. Note that Tenable Network Security has extracted the preceding description bloc...
Mandrake Linux Security Advisory : netpbm (MDKSA-2005:217)
Greg Roelofs discovered and fixed several buffer overflows in pnmtopng which is also included in netpbm, a collection of graphic conversion utilities, that can lead to the execution of arbitrary code via a specially crafted PNM file. Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlie...
Ubuntu 4.10 : XML library vulnerabilities (USN-10-1)
Several buffer overflows have been discovered in libxml2's FTP connection and DNS resolution functions. Supplying very long FTP URLs or IP addresses might result in execution of arbitrary code with the privileges of the process using libxml2. Since libxml2 is used in packages like php4-imagick, t...
Ubuntu 4.10 : libgd2 vulnerabilities (USN-11-1)
Several buffer overflows have been discovered in libgd's PNG handling functions. If an attacker tricked a user into loading a malicious PNG image, they could leverage this into executing arbitrary code in the context of the user opening image. Most importantly, this library is commonly used in PH...
Mandrake Linux Security Advisory : curl (MDKSA-2005:224)
Stefan Esser discovered that libcurl's URL parser function can have a malloced buffer overflows in two ways if given a too long URL. It cannot be triggered by a redirect, which makes remote exploitation unlikely, but can be passed directly to libcurl allowing for local exploitation and could also...
Ubuntu 4.10 : xpdf vulnerabilities (USN-14-1)
Markus Meissner discovered even more integer overflow vulnerabilities in xpdf, a viewer for PDF files. These integer overflows can eventually lead to buffer overflows. The Common UNIX Printing System CUPS uses the same code to print PDF files; tetex-bin uses the code to generate PDF output and...
[SECURITY] [DSA 940-1] New gpdf packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 940-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 940-1] New gpdf packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 940-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2006 http://www.debian.org/security/faq -...
DSA-940-1 gpdf - buffer overflows
Bulletin has no description...
[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 938-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 938-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 937-1] New tetex-bin packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 937-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 937-1] New tetex-bin packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 937-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...
DSA-938-1 koffice - buffer overflows
Bulletin has no description...
CVE-2006-0177
CVE-2006-0177 involves multiple buffer overflows in Cray UNICOS 9.0.2.2 that could allow local users to gain privileges. The two triggers described are: (1) invoking /usr/bin/script with a long command line argument, and (2) setting the -c option of /etc/nu to a filename containing a long line. T...
CVE-2006-0177
Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by 1 invoking /usr/bin/script with a long command line argument or 2 setting the -c option of /etc/nu to the name of a file containing a long line...
[SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 936-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 936-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2006 http://www.debian.org/security/faq -...