CVE-2008-4217

CVE-2008-4217 corresponds to an Integer signedness error in BOM handling on Apple Mac OS X prior to 10.5.6. The flaw can be triggered by crafted CPIO archive headers, causing a stack-based buffer overflow and enabling remote code execution. Affected product: Mac OS X so far identified as before 1...

CVE-2008-4217

Integer signedness error in BOM in Apple Mac OS X before 10.5.6 allows remote attackers to execute arbitrary code via the headers in a crafted CPIO archive, leading to a stack-based buffer overflow...

CVE-2008-4217: Undefined Security Weakness

Integer signedness error in BOM in Apple Mac OS X before 10.5.6 allows remote attackers to execute arbitrary code via the headers in a crafted CPIO archive, leading to a stack-based buffer overflow...

Integer overflow

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-5317

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-5317

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-5317

LittleCMS (lcms) vulnerability CVE-2008-5317: In cmsAllocGamma() of src/cmsgamma.c, integer signedness error before 1.17 can cause an under-allocated memory allocation when parsing a file with a specific number of entries. This could lead to memory corruption or related failures. Affected version...

CVE-2008-5317

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-5317: Undefined Security Weakness

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-4211

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

CVE-2008-4211

CVE-2008-4211 describes a signedness error in QuickLook on Mac OS X 10.5.5 and in Office Viewer for iPhone OS 1.0–2.1 that allows remote attackers to trigger an out-of-bounds memory access via a crafted Excel file (relating to “handling of columns”), potentially causing denial of service and arbi...

CVE-2008-4211

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

Gentoo Security Advisory GLSA 200606-01 (opera)

The remote host is missing updates announced in advisory GLSA 200606-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-01 (opera)

The remote host is missing updates announced in advisory GLSA 200606-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200809-06 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200809-06 VLC: Multiple vulnerabilities g reported the following vulnerabilities: An integer overflow leading to a heap-based buffer overflow in the Open function in modules/demux/tta.c CVE-2008-3732. A signedness error leading to...

GnuTLS < 2.2.4 vulnerability (Windows)

The remote host is probably affected by the vulnerabilities described in CVE-2008-1948, CVE-2008-1949, CVE-2008-1950 GnuTLS 2.2.4 vulnerability Impact CVE-2008-1948 The gnutlsservernamerecvparams function in lib/extservername.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly...

FreeBSD Ports: asterisk

The remote host is missing an update to the system as announced in the referenced advisory. VID 8b683bea-d49c-11da-a672-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: pine, zh-pine, iw-pine

The remote host is missing an update to the system as announced in the referenced advisory. VID 39bd57e6-5d83-11d8-80e3-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: pine, zh-pine, iw-pine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: up-imapproxy

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...