237 matches found
php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h
sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to cause a denial of service resource consumption by placing command-line options...
[SECURITY] Fedora 16 Update: qt-4.8.0-7.fc16
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
CVE-2011-2861
Technical details for CVE-2011-2861 are not publicly provided in the connected documents. Monitor for updates from upstream sources.
Google Chrome < 13.0.782.107 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 13.0.782.107. As such, it is potentially affected by several vulnerabilities : - An unspecified error exists related to extension installation and confirmation dialogs. Issue 75821 - A stale pointer issue exists related to...
Squid: Denial of service due internal error in string handling (SQUID-2010:3)
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted request...
RealNetworks Helix Server "x-wap-profile"头选项格式串处理漏洞
BUGTRAQ ID: 47110 CVE ID: CVE-2010-4235 RealNetwork Helix Server是一款支持多格式、跨平台的流媒体服务器软件，能将高质量的多媒体内容发不到任何网络位置。 Helix Server在处理请求中的"x-wap-profile"头选项时存在格式串处理漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Real Networks Helix Mobile Server 14.0.0 Real Networks Helix Mobile Server 13.x Real Networks Helix Mobile...
CVE-2008-7285
The vulnerability described for CVE-2008-7285 affects IBM Lotus Quickr 8.1 prior to 8.1.0.2 for Lotus Domino, due to an issue in the docnote string handling implementation. The advisory states remote attackers can cause a denial of service (daemon crash) via unknown vectors (SPR JFLD7GZT25). No c...
Squid < 3.1.8 / 3.2.0.2 NULL Pointer Dereference Denial of Service
According to its banner, the version of Squid is 3.x earlier than than 3.1.8, or 3.2.x earlier than 3.2.0.2. Such versions are potentially affected by a denial of service vulnerability caused by an internal error in string handling. A remote attacker, exploiting this flaw, could crash the affecte...
[SECURITY] Fedora 12 Update: qt-4.6.3-8.fc12
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
[SECURITY] Fedora 13 Update: qt-4.6.2-17.fc13
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
Apple QuickTime MOV File String Handling Integer Overflow (CVE-2005-2753)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processing the Apple QuickTime movie file format, which is a proprietary format created by Appl...
[SECURITY] Fedora 11 Update: qt-4.5.3-9.fc11
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
KLA10164 DoS vulnerability in Foxit Reader
Improper string handling was found in Foxit Reader. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PDF file. Original advisories - Related products Foxit-Reader...
CVE-2009-0912
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors...
RedHat Update for ruby RHSA-2008:0561-01
Check for the Version of ruby OpenVAS Vulnerability Test RedHat Update for ruby RHSA-2008:0561-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
CentOS Update for ruby CESA-2008:0562-01 centos2 i386
Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2008:0562-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Fedora Update for qt4 FEDORA-2008-3379
Check for the Version of qt4 OpenVAS Vulnerability Test Fedora Update for qt4 FEDORA-2008-3379 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
Moderate: Red Hat Security Advisory: ruby security update
Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for quick and easy object-oriented...
Moderate: Red Hat Security Advisory: ruby security update
Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for quick and easy object-oriented...
DeleGate Multiple Buffer Overflow Vulnerabilities
Overview DeleGate suffers buffer overflow when scanf, strncpy and other string handling process are set to fail with a long string sent by proxy. Impact An attacker could execute arbitrary code with the privileges of the user running DeleGate. Solution Please refer to the 'Vendor Information'...