Buffer overflow

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited,...

CVE-2006-1269

CVE-2006-1269 affects zoo 2.10 where a buffer overflow in parse.c (parse function) may allow a local user to execute arbitrary code via long filename command-line arguments during archive creation. Root cause: improper handling of long filenames. Impact: local code execution with the Zoo user’s p...

CVE-2004-1278

CVE-2004-1278 is a concrete vulnerability in jcabc2ps (20040902) where a buffer overflow in the function switch_voice in parse.c can allow remote attackers to execute arbitrary code. The available sources attribute this to crafted ABC files that trigger the overflow, implying remote code executio...