VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows

Binary data 4747.prm...

GLSA-200811-04 : Graphviz: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200811-04 Graphviz: User-assisted execution of arbitrary code Roee Hay reported a stack-based buffer overflow in the pushsubg function in parser.y when processing a DOT file with a large number of Agrapht elements. Impact : A remo...

CVE-2008-5032

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, bu...

CVE-2008-5005

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...

VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows

A version of VLC between 0.5.0 and 0.9.5 is installed on the remote host. Such versions are affected by the following vulnerabilities : - RealText subtitle file modules\demux\subtitle.c processing is susceptible to a buffer overflow caused by user-supplied data from a malicious subtitle file bein...

Secunia Research: Adobe Acrobat/Reader "util.printf()" Buffer Overflow

====================================================================== Secunia Research 04/11/2008 - Adobe Acrobat/Reader "util.printf" Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2007-5394

Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure, a different vulnerability than CVE-2007-5169 and CVE-2007-6432...

CVE-2008-4779

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...

CVE-2008-4779

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...

Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow

====================================================================== Secunia Research 22/10/2008 - GNU Enscript "setfilename" Special Escape Buffer Overflow - ====================================================================== Table of Contents Affected...

Trend Micro OfficeScan CGI Parsing Buffer Overflow Vulnerability

This host is installed with Trend Micro OfficeScan and is prone to stack based buffer overflow vulnerability. The vulnerability is due to boundary error in the CGI modules when processing specially crafted HTTP request. OpenVAS Vulnerability Test $Id:...

Secunia Research: Trend Micro OfficeScan CGI Parsing Buffer Overflows

====================================================================== Secunia Research 22/10/2008 - Trend Micro OfficeScan CGI Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

CVE-2008-4729

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control hclxweb.dll in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0...

CVE-2008-4726

CVE-2008-4726 concerns GoodTech SSH Server 6.4, where the SFTP subsystem is vulnerable to a stack-based buffer overflow. The flaw arises when processing SFTP commands (notably open, unlink, opendir, and related parameters); a sufficiently long argument can overflow a stack buffer, enabling remote...

Stack overflow

Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to...

CVE-2008-4729

CVE-2008-4729 concerns a stack-based buffer overflow in the Hummingbird XWebHostCtrl.1 ActiveX control (hclxweb.dll) used by Hummingbird Xweb ActiveX Control <= 13.0. The overflow is triggered by a too-long PlainTextPassword property, potentially enabling remote arbitrary code execution; note ...

CVE-2008-3863

Stack-based buffer overflow in the readspecialescape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e aka special escapes processing option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafted ASCII file, related to the setfilename...

BEA Weblogic Transfer-Encoding Buffer Overflow

This module exploits a stack based buffer overflow in the BEA Weblogic Apache plugin. This vulnerability exists in the error reporting for unknown Transfer-Encoding headers. You may have to run this twice due to timing issues with handlers. This module requires Metasploit:...

enscript -- arbitrary code execution vulnerability

Ulf Harnhammar of Secunia Research reports: Stack-based buffer overflow in the readspecialescape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e aka special escapes processing option is enabled, allows user-assisted remote attackers to execute arbitrary code via a crafte...

CVE-2008-4654

CVE-2008-4654 affects VideoLAN VLC media player (versions 0.9.0–0.9.4) via a stack-based buffer overflow in the Ty TiVo demux parse path (parse_master in ty.c) that can be triggered by a crafted TiVo TY header. The vulnerability allows remote attackers to execute arbitrary code with the privilege...