Buffer overflow

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

DEBIAN-CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

CVE-2007-5378

CVE-2007-5378 affects Tk Toolkit GIF handling. A buffer overflow in Tk's animated GIF processing occurs when an initial subimage is smaller than subsequent subimages, triggering the overflow in ReadImage (tkImgGIF.c). Affected: Tk 8.4.12 and earlier, and 8.3.5 and earlier. Consequence: denial of ...

CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

[SECURITY] Fedora Core 6 Update: qt-3.3.8-2.fc6

Qt is a GUI software toolkit which simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. Qt is written in C++ and is fully object-oriented. This package contains the shared library needed to run qt applications, as well as the README fil...

Wordpress Multiple Versions Pwnpress Exploitation Tookit (0.2pub)

No description provided by source. !/usr/bin/env ruby .---. .---. : : o : happy antiblogging, dear kids! ..-: 0 : :-.. / .-'' ' ---' ---' " -. Copyright c Lance M. Havok .' " ' " . " . ' " . : '.---.,,.,...,.,.,.,..---. ' ; . " . .' " .' ----- All rights reserved. . '...

Wordpress Multiple Versions Pwnpress Exploitation Tookit (0.2pub)

Exploit for unknown platform in category web applications ================================================================= Wordpress Multiple Versions Pwnpress Exploitation Tookit 0.2pub ================================================================= !/usr/bin/env ruby .---. .---. : : o : happ...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...

Moderate: Red Hat Security Advisory: qt security update

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

Buffer overflow in lib/silcclient/clientnotify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICKCHANGE" notifications...

CVE-2007-3728

CVE-2007-3728 affects SILC Client and SILC Toolkit via a buffer overflow in lib/silcclient/client_notify.c, exploitable by remote attackers sending NICK_CHANGE notifications. The issue exists in versions before 1.1.2 and can cause a denial of service. Mitigation: upgrade to SILC Toolkit 1.1.2 or ...

SILC工具包和客户端NICK_CHANGE函数远程溢出漏洞

BUGTRAQ ID: 24795 SILC（Secure Internet Live Conferencing）是安全的互联网会议讨论系统，可以发送任何类型的信息，包括多媒体信息，如视频、音频、图象等等。 SILC在处理畸形格式的消息时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 SILC客户端和工具包的lib/silcclient/clientnotify.c文件没有正确地处理NICKCHANGE通知。如果攻击者更改了隧道中的别名，就可能触发缓冲区溢出，导致执行任意指令。 SILC Toolkit/Client 1.1.2...

CVE-2007-2784

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...

Code injection

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...

CVE-2007-2784

Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier globusnexus-6.6 and earlier allows remote attackers to cause a denial of service resource exhaustion and system crash via certain requests to temporary TCP ports for a GRAM2 job or its MPICH-G2 applications...