129 matches found
openSUSE 10 Security Update : mutt (mutt-1701)
Mutt had a buffer overflow in IMAP namespace parsing code which may open a possible remote vulnerability CVE-2006-3242. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mutt-1701. The text...
Debian DSA-1375-1 : openoffice.org - buffer overflow
A heap overflow vulnerability has been discovered in the TIFF parsing code of the OpenOffice.org suite. The parser uses untrusted values from the TIFF file to calculate the number of bytes of memory to allocate. A specially crafted TIFF image could trigger an integer overflow and subsequently a...
openoffice -- arbitrary command execution vulnerability
iDefense reports: Remote exploitation of multiple integer overflow vulnerabilities within OpenOffice, as included in various vendors' operating system distributions, allows attackers to execute arbitrary code. These vulnerabilities exist within the TIFF parsing code of the OpenOffice suite. When...
[Full-disclosure] eXtremail-v9
The attached POC exploits a trivial stack smash in the DNS parsing code of eXtremail versions = 2.1.1 current. The POC attached is rather trivial in that it simply answers queries with a suitable response to exhibit the overflow. However, the problem is further compounded by the fact that eXtrema...
Apple WebKit library ROWSPAN DoS
NULL pointer dereference on large rowspan number in HTTP parsing code...
CVE-2005-3193
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code JPXStream.c for xpdf 3.01 and earlier, as used in products such as 1 Poppler, 2 teTeX, 3 KDE kpdf, 4 CUPS, and 5 libextractor allows user-assisted attackers to cause a denial of service heap...
CVE-2005-2804
CVE-2005-2804 describes an Integer overflow in the registry parsing code of GroupWise 6.5.3 (and possibly earlier versions) that could be triggered by a large TCP/IP port value stored in a Windows registry key. This flaw allows remote attackers to cause an application crash (denial of service). T...
CVE-2001-0028: Undefined Security Weakness
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " quotation characters...
