IBM Director Agent Denial of Service

There is a vulnerability within IBM Director Agent, a tool released by IBM to monitor and control computer systems remotely. It is possible for a remote attacker to craft and send a packet that will cause the remote Agent to terminate leading to a denial of service condition. Upon receipt of a...

CA BrightStor ARCserve Backup XDR Parsing Buffer Overflow (CVE-2008-2242)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

Novell eDirectory LDAP NULL Search Parameter Buffer Overflow (CVE-2008-1809)

Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. The eDirectory LDAP server uses TCP port 389 for clear text LDAP communication. There exists a heap buffer overflow vulnerability in Novell eDirectory. The flaw is due to an incorrect calculation when...

Apple QuickTime Multiple Denial Of Service Vulnerabilities (Windows)

The host is installed with Apple QuickTime and is prone to multiple Denial Of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplequicktimemultdosvulnwin.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple QuickTime Multiple Denial Of Service Vulnerabilities Windows Authors: Antu Sanadi...

Mozilla Firefox XSL Transformation Memory Corruption (CVE-2009-1169)

A memory corruption vulnerability exists in Mozilla Firefox. The flaw is due to insufficient validation while processing a malicious XSL stylesheet. A remote attacker can exploit this vulnerability by enticing the target user to open a crafted webpage. In a successful attack that arbitrary code...

Microsoft Windows WMF Handling Arbitrary Code Execution (CVE-2005-4560)

There exists a code execution vulnerability in Microsoft Windows. The vulnerability is created by unrestricted access to GDI functions through WMF files. An attacker can exploit this vulnerability to supply and execute arbitrary code through calling a specific GDI function via a crafted WMF file...

Apple QuickTime for Java toQTPointer Function Memory Corruption (CVE-2007-2175)

Apple QuickTime is a multi-platform, industry-standard, multimedia software architecture. It is used by software developers, hardware manufacturers, and content creators to author and publish multiple media documents. Java is an object-oriented language that includes a set of libraries that...

Firebird XDR Operation Request Handling Denial of Service (CVE-2008-0387)

There exists a null-dereference overflow vulnerability in Firebird database project. The flaw resides in the External Data Representation XDR protocol processing routines. A remote unauthenticated attacker may exploit this vulnerability by sending crafted message to the target server. Successful...

GNOME Project libxslt Library RC4 Key String Buffer Overflow (CVE-2008-2935)

XSLT is an XML language to define transformation for XML. XSLT is designed for use as part of XSL, which is a stylesheet language for XML. In addition to XSLT, XSL includes an XML vocabulary for specifying formatting. There exists a heap based buffer overflow vulnerability in RC4 libxslt...

Mozilla Firefox DOMNodeRemoved Memory Corruption (CVE-2006-2779)

The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. The browser is capable of interpreting various HTML specifications, as well as client side scripting models and languages. A memory...

Rising 2 0 1 0 year combined version of the latest vulnerability-vulnerability warning-the black bar safety net

Vulnerability Description: The Swiss Star memory address constantly written into the code so that its error exit killrising.rar 4 8 2 4 K Unzip password: qing520 Test code: Copy the code DWORD GetProcessIdFromNameLPCTSTR name PROCESSENTRY32 pe; DWORD id = 0; HANDLE hSnapshot =...

Sun Java Runtime Environment Type1 Font Parsing Integer Overflow (CVE-2009-1099)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...

TCPDUMP ISAKMP Payload Handling DoS (CVE-2004-0183)

Tcpdump parses and displays, and optionally records packets received on a network interface matching a user provided filter. Two vulnerabilities exist in the Tcpdump ISAKMP payload handling module, which can be exploited to cause a DoS Denial of Service by sending packets with specially crafted...

Microsoft Windows GDIplus GpFont.SetData Integer Overflow (CVE-2009-1217)

A vulnerability has been reported in Microsoft Windows Graphics Device Interface GDI. The problem is caused by improper handling the length of EmfPlusFont in EMF files. Remote attackers can exploit this vulnerability by enticing target users to open a specially crafted EMF file. Triggering this...

Orbit Downloader Download Argument Processing Stack Buffer Overflow (CVE-2008-1602)

There exists a buffer overflow vulnerability in Orbit Downloader. The vulnerability is caused due to insufficient boundary checking when the application processes the URL string. An attacker may exploit this vulnerability by enticing a target user to open a malicious long URL. Successful...

Apple QuickTime PDAT Atom Parsing Buffer Overflow (CVE-2008-3625)

Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. There exists a stack overflow vulnerability in Apple QuickTime application. The vulnerability is due to imprope...

[Backports-security-announce] etch-backports discontinued

Hi users, Hi contributors, as some of you may heard 1 the security support for etch terminated on February 15th. That means that our support for etch backports also ends here. Please dont upload to etch-backports anymore. The downloads are still possible, but please remember that there is no...

[Backports-security-announce] etch-backports discontinued

Hi users, Hi contributors, as some of you may heard 1 the security support for etch terminated on February 15th. That means that our support for etch backports also ends here. Please dont upload to etch-backports anymore. The downloads are still possible, but please remember that there is no...

Apple QuickTime MOV File JVTCompEncodeFrame Heap Overflow (CVE-2007-2295)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...

Apple QuickTime Color Table ID Heap Corruption (CVE-2007-0718)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processing Apple QuickTime Image File format, which is a proprietary format created by Apple...