291 matches found
CVE-2011-0901
The CVE-2011-0901 entry affects Terminal Server Client (tsclient) 0.150 and possibly other versions. The vulnerability is due to multiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) that let an attacker supply a crafted .RDP file with long username, password, or...
Stack overflow
Multiple stack-based buffer overflows in the Cisco WebEx Recording Format WRF and Advanced Recording Format ARF Players T27LB before SP21 EP3 and T27LC before SP22 allow remote attackers to execute arbitrary code via a crafted 1 .wrf or 2 .arf file, related to use of a function pointer in a...
CVE-2010-4712
Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a Content-Type header containing 1 multiple items separated by ; semicolon characters or 2 crafted string data...
CVE-2010-4523
Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to 1 card-acos5.c, 2 card-atrust-acos.c, and 3 card-starcos.c...
CVE-2010-4523
Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to 1 card-acos5.c, 2 card-atrust-acos.c, and 3 card-starcos.c...
CVE-2010-4221
Multiple stack-based buffer overflows in the prnetiotelnetgets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a 1 FTP or 2 FTPS server...
CVE-2010-3040
Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager ICM before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a 1 HandleUpgradeAll, 2 AgentUpgrade, 3 HandleQueryNodeInfoReq, or 4 HandleUpgradeTrace TCP packet, aka...
Stack overflow
Multiple stack-based buffer overflows in the prnetiotelnetgets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a 1 FTP or 2 FTPS server...
CVE-2010-3040
Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager ICM before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a 1 HandleUpgradeAll, 2 AgentUpgrade, 3 HandleQueryNodeInfoReq, or 4 HandleUpgradeTrace TCP packet, aka...
Fedora 12 : gnome-xcf-thumbnailer-1.0-4.fc12 (2010-17041)
This update fixes potential stack-based buffer overflows that can allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image that causes a conversion to a location 'above or to the left of the canvas.' Note that Tenable Network Security has...
CVE-2010-4142
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10 and earlier) is affected by stack-based buffer overflows in SCPC_INITIALIZE, SCPC_INITIALIZE_RF, and SCPC_TXTEVENT handling. Exploitation could crash the service and, in some cases, allow remote arbitrary code execution. Known affected versions inclu...
Mandriva Update for dovecot MDVSA-2010:196 (dovecot)
Check for the Version of dovecot OpenVAS Vulnerability Test Mandriva Update for dovecot MDVSA-2010:196 dovecot Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CVE-2010-3758
Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the 1 AGISendToLog aka SendToLog function; the 2 group, 3...
Stack overflow
Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to "certain records."...
CVE-2010-1797
Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...
CVE-2010-1797
Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...
Stack overflow
Multiple stack-based buffer overflows in hsolinkcontrol in hsolink 1.0.118 allow local users to gain privileges via long command-line arguments, a different vulnerability than CVE-2010-1671. NOTE: some of these details are obtained from third party information...
CVE-2010-2930
CVE-2010-2930 affects hsolinkcontrol in hsolink 1.0.118. The issue consists of multiple stack-based buffer overflows triggered by long command-line arguments, enabling local privilege escalation. Root cause is buffer overflows in hsolinkcontrol. The provided documents do not specify a patch or wo...
CVE-2010-2930
Multiple stack-based buffer overflows in hsolinkcontrol in hsolink 1.0.118 allow local users to gain privileges via long command-line arguments, a different vulnerability than CVE-2010-1671. NOTE: some of these details are obtained from third party information...
CVE-2010-0998
Multiple stack-based buffer overflows in Free Download Manager FDM before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving 1 the folders feature in Site Explorer, 2 the websites feature in Site Explorer, 3 an FTP URI, or 4 a redirect...