[SECURITY] [DSA-2116-1] New freetype packages integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-2116-1 [email protected] http://www.debian.org/security/ Stefan Fritsch October 4, 2010 http://www.debian.org/security/faq -...

freetype: Input stream position error by processing Compact Font Format (CFF) font files

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

freetype: Input stream position error by processing Compact Font Format (CFF) font files

Integer overflow in base/ftstream.c in libXft aka the X FreeType library in FreeType before 2.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Compact Font Format CFF font file that triggers a heap-based buffer overflow,...

DSA-2116-1 freetype - integer overflow

Bulletin has no description...

DEBIAN-CVE-2010-3434

Buffer overflow in the findstreambounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party informatio...

Non-secure content warning in IE8 on the Dashboards screen caused by the wiki renderer

Wiki renderer-generated contents e.g. in the activity stream include references to icons with http prefix that cause IE8 to generate security warnings for JIRA instances accessible via HTTPS. To reproduce it, have contents in the activity stream gadget contain icons included by the wiki renderer,...

Non-secure content warning in IE8 on the Dashboards screen caused by the wiki renderer

Wiki renderer-generated contents e.g. in the activity stream include references to icons with http prefix that cause IE8 to generate security warnings for JIRA instances accessible via HTTPS. To reproduce it, have contents in the activity stream gadget contain icons included by the wiki renderer,...

Non-secure content warning in IE8 on the Dashboards screen caused by the wiki renderer

Wiki renderer-generated contents e.g. in the activity stream include references to icons with http prefix that cause IE8 to generate security warnings for JIRA instances accessible via HTTPS. To reproduce it, have contents in the activity stream gadget contain icons included by the wiki renderer,...

Can't set visibility on comment created via Activity Stream Gadget

I can't restrict the visibility of an comment created via the activity stream gadget. In our environment it is important for us to have this feature available everywhere where users are able to create comments on issues...

Can't set visibility on comment created via Activity Stream Gadget

I can't restrict the visibility of an comment created via the activity stream gadget. In our environment it is important for us to have this feature available everywhere where users are able to create comments on issues...

DEBIAN-CVE-2010-2805

The FTStreamEnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

kernel: sctp: crash due to malformed SCTPChunkInit packet

The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of service system crash via an SCTPChunkInit packet containing multiple invalid parameters that require a large amount of error data...

MS10-052: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (2115168)

The MPEG Layer-3 Audio Codec for Microsoft DirectShow l3codecx.ax, which is distributed as part of Windows Media as well as the Windows operating system, contains a buffer overflow vulnerability that can be triggered by a specially crafted MPEG Layer-3 audio stream. If an attacker can trick a use...

Mini-stream Ripper v3.1.2.1 Buffer Overflow (DEP Bypass)

Exploit for windows platform in category local exploits ======================================================== Mini-stream Ripper v3.1.2.1 Buffer Overflow DEP Bypass ======================================================== / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS...

Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow (DEP Bypass)

Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow DEP Bypass / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage ...

Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow (DEP Bypass)

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...

Mini-stream RM-MP3 Converter/WMDownloader/ASX MP3 Stack Buffer

Exploit for windows platform in category local exploits ============================================================================================ Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter Stack Buffer Overflow Exploit...

Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter - Local Stack Buffer Overflow

Exploit Title: Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter Stack Buffer Overflow Exploit Tested on Windows XP SP3 Pro Found By : Cyber-Zone ABDELKHALEK https://www.securityfocus.com/bid/34494 The way exploit written is slightly different than above Vulnerability Refer:...

QQPlayer 2.3.696.400p1 - .smi File Buffer Overflow

QQPlayer 2.3.696.400p1 - .smi File Buffer Overflow !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer video...

QQPlayer smi File Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================= QQPlayer smi File Buffer Overflow Exploit ========================================= !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation...