629 matches found
CVE-2004-1012
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...
CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...
FreeBSD : ImageMagick -- EXIF parser buffer overflow (3)
The following package needs to be updated: ImageMagick %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgeeb1c12833e711d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
CVE-2004-0692
The XPM parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693...
CVE-2004-0692
The XPM parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693...
Multiple vendor SOAP server (XML parser) denial of service (DTD parameter entities)
/////////////////////////////////////////////////////////////////////////////// //========================== Security Advisory ==========================// ///////////////////////////////////////////////////////////////////////////////...
Microsoft Internet Explorer 5/6 - MSXML XML File Parsing Cross-Site Scripting
source: https://www.securityfocus.com/bid/7938/info A vulnerability has been reported for the Microsoft Internet Explorer that may result in cross-site scripting attacks. If IE, using the MSXML parser, is unable to parse the requested XML file, it will display a parse error that also includes the...
[SECURITY] [DSA-130-1] memory allocation error in ethereal
Package: ethereal Vulnerability: remotely triggered memory allocation error Debian-specific: no Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal...
ROS-2-1919
2.1919 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...