666 matches found
Mandrake Security Advisory MDVSA-2009:068 (poppler)
The remote host is missing an update to poppler announced via advisory MDVSA-2009:068. OpenVAS Vulnerability Test $Id: mdksa2009068.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:068 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
DEBIAN-CVE-2009-0756
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...
CVE-2009-0756
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...
Memory corruption
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...
CVE-2009-0756
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...
CVE-2009-0756
The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of service crash via a PDF file that triggers a parsing error, which is not properly handled by JBIG2SymbolDict::JBIG2SymbolDict and triggers an invalid memory dereference...
CVE-2009-0756
CVE-2009-0756 affects Poppler prior to version 0.10.4, where JBIG2Stream::readSymbolDictSeg can trigger a parsing error in a PDF that is not properly handled by JBIG2SymbolDict::~JBIG2SymbolDict, leading to an invalid memory dereference and denial of service. SUSE and OpenVAS advisories mirror th...
Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
This host is missing a critical security update according to Microsoft Bulletin MS09-005. OpenVAS Vulnerability Test $Id: secpodms09-005.nasl 5346 2017-02-19 08:43:11Z cfi $ Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution 957634 Authors: Chandan S Copyright c 2009...
FreeBSD : mozilla -- multiple vulnerabilities (f29fea8f-b19f-11dd-a55e-00163e000016)
The Mozilla Foundation reports : MFSA 2008-58 Parsing error in E4X default namespace MFSA 2008-57 -moz-binding property bypasses security checks on codebase principals MFSA 2008-56 nsXMLHttpRequest::NotifyEventListeners same-origin violation MFSA 2008-55 Crash and remote code execution in...
SeaMonkey < 1.1.13 Multiple Vulnerabilities
Binary data 4753.prm...
mozilla -- multiple vulnerabilities
The Mozilla Foundation reports: MFSA 2008-58 Parsing error in E4X default namespace MFSA 2008-57 -moz-binding property bypasses security checks on codebase principals MFSA 2008-56 nsXMLHttpRequest::NotifyEventListeners same-origin violation MFSA 2008-55 Crash and remote code execution in...
Mozilla Firefox < 2.0.0.18 Multiple Vulnerabilities
Binary data 4751.prm...
RHEL 4 / 5 : firefox (RHSA-2008:0978)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0978 advisory. - Mozilla buffer overflow in http-index-format parser CVE-2008-0017 - Mozilla crash and remote code execution via proto tampering...
Non Compliant MS-SQL TCP
MSSQL protections use a TDS protocol parser. A parsing error can be an indication of malicious traffic...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit
No description provided by source. / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a SIGPIPE the...
Axigen 2.0.0b1 - Remote Denial of Service (1)
Axigen 2.0.0b1 - Remote Denial of Service 1 / doaxigen.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sat Oct 22 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx 0x08088054: parsing error results in DoS little-endian, confirmed DoS + off-by-one heap smash big-endian Note: if you receive a...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
Exploit for linux platform in category dos / poc ====================================================== Axigen include include include include include include include define BUFSIZE 1024 define BBUFSIZE BUFSIZE/34+1 define AUTHCMD "1 AUTHENTICATE PLAIN\r\n" define APPENDCMD "2 APPEND...
Axigen 2.0.0b1 - Remote Denial of Service (2)
Axigen 2.0.0b1 - Remote Denial of Service 2 / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...
CVE-2006-0669
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the 1 Forum and 2 pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database...