CVE-2008-1102

Blender 2.45 is affected by a stack-based buffer overflow in the imb_loadhdr function triggered by a crafted Radiance RGBE image inside a .blend file, enabling user-assisted remote code execution. The issue stems from improper handling of Radiance RGBE data, as described for CVE-2008-1102, and is...

CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

CVE-2008-1881

Stack-based buffer overflow in the ParseSSA function modules/demux/subtitle.c in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681...

CVE-2008-1881

VLC 0.8.6e contains a stack-based buffer overflow in ParseSSA (modules/demux/subtitle.c) that can be triggered by a long SSA subtitle, allowing remote code execution. This CVE is CVE-2008-1881; related OpenVAS and Debian advisories document the issue as a real vulnerability and note Debian/ Gento...

CVE-2008-1881

Stack-based buffer overflow in the ParseSSA function modules/demux/subtitle.c in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681...

CVE-2007-5747

Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Quattro Pro QPRO file with crafted values that trigger an excessive loop and a stack-based buffer overflow...

CVE-2007-5747

Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Quattro Pro QPRO file with crafted values that trigger an excessive loop and a stack-based buffer overflow...

xinelib-overflow.txt

xine-lib title = strdup&header0x0E; demuxnsfsendchunk: 122: char title100; 162: sprintftitle, "%s, song %d/%d", this-title, this-currentsong, this-totalsongs; - Affected applications http://xinehq.de/index.php/releases - PoC perl -e 'print "\x4E\x45\x53\x4D\x1A\x01\x01\x01\x80\x80\x18\x8A\x03\x8A...

CVE-2007-5758

Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server DAS in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to execute arbitrary code via a long DASPROF environment variable...

Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

CVE-2008-0962

Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface...

CVE-2008-0962

Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface...

CVE-2008-0962

EMC DiskXtender 6.20.060’s File System Manager is affected by a stack-based buffer overflow in the RPC interface (UUID b157b800-aef5-11d3-ae49-00600834c15f) that can allow remote authenticated users to execute arbitrary code. The vulnerability arises from improper validation of string length in c...

Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

CVE-2008-1724

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcsten.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter...

CVE-2007-6020

CVE-2007-6020 describes multiple stack-based buffer overflows in the Folio Flat File speed reader (foliosr.dll) of Autonomy KeyView 10.3.0.0, used by IBM Lotus Notes and Symantec Mail Security (SMSSMTP/Exchange/Domino) and activePDF DocConverter. Secunia and NVD detail that boundary errors occur ...

CVE-2008-1087

Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."...

CVE-2008-1087

Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."...

CVE-2008-1697

Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager OV NNM 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of thes...

Stack overflow

Stack-based buffer overflow in the PGMWebHandler::parserequest function in the StarTeam Multicast Service component STMulticastService 6.4 in Borland CaliberRM 2006 allows remote attackers to execute arbitrary code via a large HTTP request...