CVE-2002-2068

The CVE-2002-2068 entry concerns Eraser 5.3 failing to clear Windows alternate data streams (ADS) attached to NTFS files, enabling recovery of data that should be deleted. Affected software: Eraser 5.3; root cause: ADS not cleared. Impact stated: data that was supposed to be deleted can be recove...

CVE-2002-2067

East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2069

PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2068

Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2070

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2005-2213

Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...

CVE-2005-2213

Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflo...

CVE-2005-2096

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

Computer Associates antivirus library buffer overflow

Heap overflow on OLE streams VBA projects analysis Microsoft Office documents...

MacOS X with HFS+ filesystem multiple web servers information disclosure

By accessing named file streams it's possible to access protected file data...

mpg123 -- buffer overflow vulnerability

Yuri D'Elia has found a buffer overflow vulnerability in mpg123's parsing of frame headers in input streams. This vulnerability can potentially lead to execution of arbitrary code with the permissions of the user running mpg123, if the user runs mpg123 on a specially crafted MP2 or MP3 file...

USN-42-1: Xine library vulnerabilities

Several buffer overflows have been discovered in xine-lib, the video/audio codec library for Xine frontends xine-ui, totem-xine, kaffeine, and others. If an attacker tricked a user into loading a malicious RTSP stream or a stream with specially crafted AIFF audio or PNM image data, they could...

Broadcast crash in Vypress Tonecast 1.3

Luigi Auriemma Application: Vypress Tonecast http://www.vypress.com/products/tonecast/ Versions: = 1.3 both the program and the plugin for Winamp Platforms: Windows Bug: crash Exploitation: remote, versus receivers broadcast Date: 19 October 2004 Author: Luigi Auriemma e-mail: [email protected]...

DEBIAN-CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service

Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service source: https://www.securityfocus.com/bid/10025/info A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio...

CVE-2002-2068

Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

CVE-2002-2070

SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...

PT-2002-2790 · Microsoft +1 · Windows +2

Name of the Vulnerable Software and Affected Versions: SecureClean version 3 build 2.0 Description: The issue concerns the failure to clear Windows alternate data streams attached to files on NTFS file systems, allowing attackers to recover sensitive information that was supposed to be deleted...

PT-2002-2786 · Microsoft +1 · Ntfs +2

Name of the Vulnerable Software and Affected Versions: BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS...