Mozilla Firefox 2.0.0.2 - .GIF Handling Denial of Service

Mozilla Firefox 2.0.0.2 - .GIF Handling Denial of Service source: https://www.securityfocus.com/bid/22899/info Firefox is prone to a remote denial-of-service vulnerability. An attacker may exploit this vulnerability to cause the application to crash, resulting in denial-of-service conditions...

CVE-2006-7139

Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service crash via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations...

CVE-2006-7139

Removed by vendor...

Asterisk <= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit

No description provided by source. / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750,...

MOPB-03-2007:PHP Variable Destructor Deep Recursion Stack Overflow

Summary The last vulnerability for today is similar to the second one. This time the bug is however a deep recursion bug in the Zend Engine variable destruction. User input is parsed in an iterative way which allows the creation of very deeply nested array structures from user input. However when...

CVE-2007-1071

CVE-2007-1071: An integer overflow exists in Apple Mac OS X ImageIO when handling GIFs, specifically in gifGetBandProc, which can cause a denial of service and may allow arbitrary code execution. Affected: Mac OS X 10.4.8 via crafted GIF during decompression. Documentation notes this is a separat...

MDKA-2006:048 : gnuplot

An error in gnuplot was causing it to fail with a segmentation fault whenever the user attempted to produce a graphical plot via the default 'x11' term. The updated package corrects this error and allows graphical plotting via X11. Updated packages correct this issue. %NASLMINLEVEL 999999...

[Full-disclosure] Axigen <2.0.0b1 DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 attached are two DoS's used in part to win the beta testing competition of Axigen www.axigen.com mail server for versions 2.0.0b1, the vulnerabilities affect all platforms.. The first exploit is a single byte underflow causing a probabilistic intege...

KDE 3.5 (libkhtml) <= 4.2.0 / Unhandled HTML Parse Exception Exploit

No description provided by source. !-- KDE 3.5 | libkhtml = 4.2.0 / Unhandled HTML Parse Exception ============================================================ Tested with Konqueror 3.5.2 and kmail 1.9.1 Federico L. Bossi Bonin [email protected] www.globalst.com.ar Program received signal...

KDE libkhtml 3.5 4.2.0 - Unhandled HTML Parse Exception

KDE libkhtml 3.5 4.2.0 - Unhandled HTML Parse Exception ::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 4 0xb63329d5 in...

KDE 3.5 (libkhtml) <= 4.2.0 / Unhandled HTML Parse Exception Exploit

Exploit for linux platform in category dos / poc ==================================================================== KDE 3.5 libkhtml ::count from /usr/kde/3.5/lib/libkhtml.so.4 2 0xb64b0550 in TestFunctionImp::TestFunctionImp from /usr/kde/3.5/lib/libkhtml.so.4 3 0xb64b43a2 in...

wget 1.10.2 - Unchecked Boundary Condition Denial of Service

!/usr/bin/perl wget SYST ... Program received signal SIGSEGV, Segmentation fault. Switching to Thread -1211496768 LWP 22824 0xb7d1c633 in strcasecmp from /lib/tls/libc.so.6 gdb backtrace 0 0xb7d1c633 in strcasecmp from /lib/tls/libc.so.6 1 0x080542c5 in ftpsyst csock=6, servertype=0xbfe3d854 at...

kms1.py.txt

Hi, Kerio MailServer 6.3.1 changelog mentions the following bug fix: 'Fixed possible service stop when handling certain LDAP query' It turns out that vdkms6 vulnerability which is a part of VulnDisco since Oct, 2006 has been fixed. Below is a simple proof of concept code for this bug: !/usr/bin/e...

Kerio MailServer 6.2.2 - Remote Denial of Service (PoC)

!/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth remote DoS fixed in Kerio MailServer 6.3.1 Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice an...

XNetMine.txt

This is a multi-part message in MIME format. --------------070909050408080804050008 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit // Vendor: Martin Bauer Software: http://ibiblio.org/pub/Linux/games/multiplayer/XNetMine.tgz Vulnerable code: -- line:...

Kmail-1.9.1.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SilentHack.co.uk Vulnerability Research =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Background: Kmail is a HTML compatible email client that comes installed by default with the KDE desktop. This DOS requires...

Asterisk <= 1.0.12 / 1.2.12.1 (chan_skinny) Remote Heap Overflow (PoC)

Exploit for multiple platform in category dos / poc ====================================================================== Asterisk The following proof of concept causes the chanskippy to crash in different locations and due to memory corruption as well as double free calls, this is based on the...

Debian DSA-1107-1 : gnupg - integer overflow

Evgeny Legerov discovered that gnupg, the GNU privacy guard, a free PGP replacement contains an integer overflow that can cause a segmentation fault and possibly overwrite memory via a large user ID string. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Debian DSA-1115-1 : gnupg2 - integer overflow

Evgeny Legerov discovered that gnupg, the GNU privacy guard, a free PGP replacement contains an integer overflow that can cause a segmentation fault and possibly overwrite memory via a large user ID string. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Debian DSA-887-1 : clamav - several vulnerabilities

Several vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3239 The OLE2 unpacker allows...