Integer overflow

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file...

The hype factor at the RSA conference

From CNet Jon Oltsik It’s nearly time for that annual spring ritual: the RSA Conference at the Moscone Center in San Francisco. ESG data tells me that, despite the recession, global organizations continue to spend on security products. So I expect another good show, though I do anticipate that th...

CVE-2008-3624

Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a QuickTime Virtual Reality QTVR movie file with crafted panorama atoms...

CVE-2004-2361

The CVE-2004-2361 issue affects the Digital Reality game engine as used in Haegemonia 1.0–1.0.7 and Desert Rats vs. Afrika Korps 1.0. A remote attacker can cause a crash (DoS) by sending a chat message with an oversized payload, triggering an out-of-bounds read. The available documents do not pro...

CVE-2004-2361

Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service crash via a chat message with a large message size, which triggers an out-of-bounds read...

C'Nedra virtual reality framework buffer overflow

READTCPSTRING buffer overflow...

CVE-2004-2361

Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service crash via a chat message with a large message size, which triggers an out-of-bounds read...

Digital Reality Game Engine 1.0.x - Remote Denial of Service

// source: https://www.securityfocus.com/bid/9736/info It has been reported that the Digital Reality Game engine is prone to a remote denial of service vulnerability. This issue is due to a failure of the application to validate packet data size input supplied by a client. The immediate...

(SRPRE00004) WebCalendar 0.9.26

================================================= Secure Reality Pty Ltd. Security Pre-Advisory 4 SRPRE00004 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in WebCalendar Released 23/4/2001 This is a pre-release. Th...