9002 matches found
CVE-2007-0393
CVE-2007-0393 concerns Sun Solaris 9 where the system does not properly verify the status of file descriptors before setuid execution, enabling local privilege escalation by closing fd 0, 1, or 2 and then running a setuid program. The vulnerability is described as a variant of CVE-2002-0572. Conn...
CVE-2007-0393
Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572...
ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability
ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-005.html January 16, 2007 -- CVE ID: CVE-2007-0243 -- Affected Vendor: Sun Microsystems -- Affected Products: JDK and JRE 5.0 Update 9 and earlier all platforms SD...
Buffer overflow
Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...
CVE-2007-0243
Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...
CVE-2007-0243
Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...
CVE-2007-0243
CVE-2007-0243 is a memory-corruption vulnerability in Sun JDK/JRE GIF image handling. The issue arises when parsing a GIF block with a 0 width field, allowing an attacker to potentially execute arbitrary code or gain privileges within a browser-hosted Java applet context. Affected are Sun Java De...
Solaris 2.5.1 (i386) : 124945-01
The remote host is missing Sun Security Patch number 124945-01 SunOS5.x Hardware HDS7250SA 500GB SATA Disk Download program and SATA Drive firmware. Date this patch was last updated by Sun : Wed Jan 10 06:46:58 MST 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL...
Solaris 9 (x86) : 123369-01
SunOS 5.9x86: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 9 (sparc) : 123368-01
SunOS 5.9: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24220...
Solaris 8 (sparc) : 113886-49
The remote host is missing Sun Security Patch number 113886-49 OpenGL 1.3: OpenGL Patch for Solaris 32-bit. Date this patch was last updated by Sun : Thu Nov 13 05:03:25 MST 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
Solaris 8 (i386) : 119135-14
The remote host is missing Sun Security Patch number 119135-14 Message Queue 3.6x86 Service Pack 4 Patch 9 Solaris: C-API only. Date this patch was last updated by Sun : Tue Aug 12 05:59:17 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@...
Sun Java JRE GIF Image Handling Buffer Overflow (102760)
According to its version number, the Sun JRE running on the remote host has a buffer overflow issue that can be triggered when parsing a GIF image with the image width in an image block set to 0. If an attacker can trick a user on the affected system into processing a specially crafted image file...
Solaris 7 (sparc) : 113886-49
The remote host is missing Sun Security Patch number 113886-49 OpenGL 1.3: OpenGL Patch for Solaris 32-bit. Date this patch was last updated by Sun : Thu Nov 13 05:03:25 MST 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
Sun Java运行时环境GIF图形缓冲区溢出漏洞
BUGTRAQ ID: 22085 CVECAN ID: CVE-2007-0243 Sun的Java运行时环境(JRE)为JAVA应用程序提供可靠的运行环境。 Sun Java运行时环境在解析畸形GIF图形组件时存在缓冲区溢出漏洞,远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果有效GIF文件的图形块中图形宽度被设置为0的话,Java运行时就会分配指定的大小,但之后会将所有数据拷贝到大小不足的内存块中。溢出会导致多个指针破坏,之后的操作至少引用了其中的一个,因此可能导致执行任意代码。 Sun JRE = 5.0 Update 9 Sun JRE = 1.4.212 Sun JR...
Solaris 10 (sparc) : 124943-01
SunOS 5.10: SunFreeware gzip man pages pat. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/04/30. C Tenable Network Security, Inc. if !...
vulnerability script indexu all versions
vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1| in upgrade.php...
Sun Microsystems Java GIF image processing buffer overflow
Overview A vulnerability in the Sun Java Runtime Environment may allow an attacker to execute arbitrary code on a vulnerable system. Description The Sun Java Runtime Environment JRE allows users to run Java applications in a browser or as standalone programs. Sun has made the JRE available for...
Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Java Virtual Machine JVM. User interaction is required to exploit this vulnerability in that the target must visit a malicious website. The specific flaw exists during the parsing of GIF...