VLC media player RealText subtitle file ParseRealText buffer overflow

Added: 12/01/2008 CVE: CVE-2008-5036 BID: 32125 OSVDB: 49809 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A buffer overflow vulnerability in the ParseRealText function allows command execution when a user opens a media fi...

Linux Kernel Stream Control Transmission Protocol Violation Vulnerability

This host has Linux Kernel Stream Control Transmission Protocol SCTP implementation and is prone to Protocol Violation Vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

VMWare privilege escalation

64-bit platforms guest system privilege escalation...

Firebird / InterBase Database Server Service Detection (TCP)

TCP based detection of a Firebird / InterBase Database service. SPDX-FileCopyrightText: 2008 Christian Eric Edjenguele SPDX-FileCopyrightText: Improved / extended code / detection routine since 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

OpenOffice.org <= 2.4.1 Multiple Vulnerabilities - Linux

OpenOffice.org is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openoffice:openoffice.org";...

CVE-2008-3890

The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault GPF, which allows local users to gain privileges by triggering a GPF during the kernel's return from 1 an interrupt, 2 a trap, or 3 a system call...

CVE-2008-3890

The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault GPF, which allows local users to gain privileges by triggering a GPF during the kernel's return from 1 an interrupt, 2 a trap, or 3 a system call...

CVE-2008-3282

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in the memory allocator in OpenOffice.org OOo 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document, related to...

CVE-2008-3282

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in the memory allocator in OpenOffice.org OOo 2.4.1, on 64-bit platforms, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document, related to...

Sun Solaris 'snoop(1M)' Utility Multiple Remote Vulnerabilities

The Solaris 'snoop1M' network utility is prone to multiple remote vulnerabilities, including: - Multiple stack-based buffer-overflow vulnerabilities - Multiple format-string vulnerabilities Exploiting these issues will allow attackers to execute arbitrary code with the privileges of the 'nobody'...

CVE-2008-3356

verifydb in Ingres 2.6, Ingres 2006 release 1 aka 9.0.4, and Ingres 2006 release 2 aka 9.1.0 on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application's own log file, which allows local users to overwrite arbitrary files ...

IBM DB2 9.5 < 9.5 Fix Pack 1 Multiple Vulnerabilities

Binary data 4612.prm...

CVE-2008-3142

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicoderesize...

Buffer overflow

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicoderesize...

Apache Tomcat JK Web Server Connector URI worker map buffer overflow

Added: 07/30/2008 CVE: CVE-2007-0774 BID: 22791 OSVDB: 33855 Background Apache Tomcat is a Java web application platform which can run under various types of web servers. The JK Web Server Connector modjk is used for communication between Tomcat and the web server. Problem A buffer overflow in a...

CVE-2008-3247

The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x8664 platforms uses an incorrect size for ldtdesc, which allows local users to cause a denial of service system crash or possibly gain privileges via unspecified vectors...

Multiple Vendors Malicious SVG File Denial of Service PoC

No description provided by source. """ Malicious SVG file DoS The following applications were tested in their latest revisions: Firefox's "browse for file, preview" object on linux: affected evince on linux: affected eog on linux: affected gimp on linux: affected inkscape on linux: unaffected...

CVE-2008-2308

Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service memory corruption and application crash by resolving an alias that contains crafted AFP volume mount information...

lftp <= 2.6.9 Remote Stack based Overflow Exploit

No description provided by source. / lftp remote stack-based overflow exploit by Li0n7 voila fr Vulnerability discovered by Ulf Harnhammar Ulf.Harnhammar.9485 student uu se Lftp versions later than 2.6.10 are prone to a remotly exploitable stack-based overflow in trynetscapeproxy and trysquideplf...