Out-of-bounds

The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...

PT-2012-4782

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.2.38 Description The issue is related to the networkstatus parse vote from string function in routerparse.c, which does not properly handle an invalid flavor name. This allows remote attackers to cause a denial of...

PT-2012-1528 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue is related to an array index error in the rose parse national function, which can be exploited by remote attackers to cause a denial of service or potentially have other unspecified...

PT-2012-1136

Name of the Vulnerable Software and Affected Versions TagLib versions prior to 1.7.1 Description The issue concerns multiple vulnerabilities in the TagLib package that can lead to a disruption of protected information availability. These vulnerabilities can be exploited remotely. Specifically, th...

PT-2012-1788

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.8.3 Description The issue is related to an integer underflow in the asfrtp parse packet function, which can be exploited by remote attackers to execute arbitrary code via a crafted ASF packet. Recommendations For...

PT-2012-1158

Name of the Vulnerable Software and Affected Versions OpenSSH versions 5.8 and earlier Description The issue allows remote authenticated users to cause a denial of service, specifically memory consumption, when gssapi-with-mic authentication is enabled. This is due to the ssh gssapi parse ename...

Asterisk - 'ast_parse_digest()' Stack Buffer Overflow (PoC)

=========================== Description =========================== There is a remotely exploitable stack buffer overflow in HTTP digest authentication handling in Asterisk. This vulnerability includes the possibility of code execution with plenty of stack space for inserting custom code to run. ...

PT-2012-1224

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.9 Description The issue is related to a memory leak in the timezone functionality, which can be exploited by remote attackers to cause a denial of service due to memory consumption. This is achieved by triggering many...

Opera Website - Cross Site Scripting Vulnerability

Document Title: =============== Opera Website - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=369 Release Date: ============= 2012-01-23 Vulnerability Laboratory ID VL-ID: ==================================== 369 Comm...

rsyslog: parseLegacySyslogMsg off-by-two buffer overflow

Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service application exit via a long TAG in a legacy syslog message...

cuteeditor editor using the method of two-vulnerability and early warning-the black bar safety net

Method 1. Direct Download load. ashx configuration file /CuteSoftClient/CuteEditor/Load. ashx? type=image&file=../../../web. config Then view some of the sql configuration information from the sql database connection to start with connectionStrings add name=”ynncConnectionString”...

DEBIAN-CVE-2011-1006

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

JDK Double.parseDouble Denial-Of-Service

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

libcgroup: Heap-based buffer overflow by converting list of controllers for given task into an array of strings

Heap-based buffer overflow in the parsecgroupspec function in tools/tools-common.c in the Control Group Configuration Library aka libcgroup or libcg before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear wheth...

PT-2011-1038 · Linux +1 · Libcgroup-Debuginfo +4

Name of the Vulnerable Software and Affected Versions: libcgroup versions prior to 0.37.1 libcgroup-pam version 0.36.1 libcgroup-devel version 0.36.1 libcgroup-debuginfo version 0.36.1 Description: The issue concerns multiple vulnerabilities in the libcgroup package, which can lead to a breach of...

Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability

This host is installed with Microsoft Office Power Point and is prone to remote code execution vulnerability. This NVT has been replaced by NVT secpodms11-022.nasl OID:1.3.6.1.4.1.25623.1.0.902411. OpenVAS Vulnerability Test $Id: gbmspowerpointcodeexecvuln.nasl 6538 2017-07-05 11:38:27Z cfischer ...

JDK Double.parseDouble Denial-Of-Service

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

JDK Double.parseDouble Denial-Of-Service

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

PT-2011-1510

Name of the Vulnerable Software and Affected Versions SSSD versions 1.3 through 1.5.0 SSSD version 1.4.x Description The issue allows local users to cause a denial of service, resulting in an infinite loop, crash, and prevention of login, via a crafted packet. This is due to a problem in the pam...

Samba: Stack-based buffer overflow by processing specially-crafted SID records

Stack-based buffer overflow in the 1 sidparse and 2 domsidparse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Windows Security ID SID on a file share...