Stack overflow

Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary cod...

CVE-2009-4476

Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.15 through 8.11. NOTE: some of these details are obtained from third party...

CVE-2009-4484

The CVE-2009-4484 issue affects yaSSL’s CertDecoder::GetName in taocrypt/src/asn.cpp (yaSSL before 1.9.9), which MySQL bundles and uses for SSL handshakes. A crafted X.509 client certificate name can trigger multiple stack-based buffer overflows, enabling remote code execution or memory corruptio...

CVE-2009-4270

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

CA eTrust PestPatrol Anti-Spyware 'ppctl.dll' ActiveX Control BOF Vulnerability

This host is installed with CA eTrust PestPatrol Anti-Spyware and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbetrustpestpatrolactvxctrlbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ CA eTrust PestPatrol Anti-Spyware 'ppctl.dll' ActiveX Control BOF Vulnerability...

Microsoft Windows Indeo Codec Multiple Vulnerabilities

Microsoft Windows Indeo codec is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM DB2 Universal Database Multiple SQL Functions Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2. Authentication is required to exploit this vulnerability. The specific flaw exists in the parsing of VARCHAR arguments to a number of stored procedures available by default on DB2...

IDEAL Administration '.ipj' File Processing Buffer Overflow Vulnerability

IDEAL Administration is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4310

Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations...

CVE-2009-4310

Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted compressed video data in an IV41 stream in a media file, leading to many loop iterations...

CVE-2009-4181

Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via vectors involving the sel and arg parameters to jovgraph.exe...

CVE-2009-4181

Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via vectors involving the sel and arg parameters to jovgraph.exe...

Mandriva Security Advisory MDVSA-2009:312 (dhcp)

The remote host is missing an update to dhcp announced via advisory MDVSA-2009:312. OpenVAS Vulnerability Test $Id: mdksa2009312.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:312 dhcp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-3844

HP OpenView Data Protector Application Recovery Manager (OmniInet) contains a stack-based buffer overflow in the MSG_PROTOCOL handling that affects the OmniInet.exe component. Public sources (CVE-2009-3844) indicate exploitation can lead to remote arbitrary code execution and/or denial of service...

CVE-2009-4227

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

CVE-2009-4227

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

CVE-2009-4227

CVE-2009-4227 describes a stack-based buffer overflow in Xfig/Transfig components when processing malformed 1.3 FIG files (read_1_3_textobject in f_readold.c for Xfig 3.2.5b and earlier; read_textobject in read1_3.c for Transfig 3.2.5a and earlier). The overflow is triggered by a long string in t...

CVE-2009-4227

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

CVE-2009-3994

Stack-based buffer overflow in the GetUID function in src-IL/src/ildicom.c in DevIL 1.7.8 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted DICOM file...

Stack overflow

Stack-based buffer overflow in the MYACTIVEX.MyActiveXCtrl.1 ActiveX control in MyActiveX.ocx 1.4.8.0 in Haihaisoft Universal Player allows remote attackers to execute arbitrary code via a long URL property value. NOTE: some of these details are obtained from third party information...