kernel: e1000_clean_rx_irq() denial of service

Integer underflow in the e1000cleanrxirq function in drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet aka e1000 before 7.5.5 allows remote attackers to cause a denial of service panic via a...

VLC Media Player < 1.0.1 Remote Integer Underflow (deprecated)

Binary data 5112.prm...

VLC Media Player < 1.0.1 real_get_rdt_chunk() Function Overflow

The version of VLC media player installed on the remote host is earlier than 1.0.1. Such versions contain an integer underflow involving the integer 'size' in the 'realgetrdtchunkheader' function that can be triggered when reading Real Data Transport RDT chunk headers. This 'size' variable is use...

Mandrake Security Advisory MDVSA-2009:150 (libtiff)

The remote host is missing an update to libtiff announced via advisory MDVSA-2009:150. OpenVAS Vulnerability Test $Id: mdksa2009150.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:150 libtiff Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function

Multiple integer overflows in the PyOSvsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service memory corruption or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of...

python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function

Multiple integer overflows in the PyOSvsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service memory corruption or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of...

[Full-disclosure] [DZC-2009-001] The Movie Player and VLC Media Player Real Data Transport parsing integer underflow.

Advisory: The Movie Player and VLC Media Player Real Data Transport parsing integer underflow. Affected products: The Movie player svn r29438 1 VLC media player = 1.0.0 2 Possible others applications that use the xine lib code 3. Discovred by: tixxDZ tixxdz at gmail dot com DZCORE Labs, Algeria...

python security update

2.3.4-14.7.el48.2 - Fix all of the low priority security bugs: - Resolves: rhbz486329 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows...

openSUSE Security Update : libapr-util1 (libapr-util1-968)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

openSUSE Security Update : libtiff (libtiff-162)

A buffer underflow CVE-2008-2327 has been fixed in libtiff. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff-162. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libapr-util1 (libapr-util1-968)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

CVE-2009-2547

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

libtiff: LZWDecodeCompat underflow

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327...

Mandriva Linux Security Advisory : libtiff (MDVSA-2009:150)

Multiple vulnerabilities has been found and corrected in libtiff : Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327 CVE-2009-2285. Fix...

LibTIFF TIFF Image Buffer Underflow Vulnerability

LibTIFF is prone to buffer underflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibTIFF TIFF Image Buffer Underflow Vulnerability

This host is installed with LibTIFF and is prone to buffer underflow vulnerability. OpenVAS Vulnerability Test $Id: gblibtiffbufvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ LibTIFF TIFF Image Buffer Underflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

GLSA-200907-03 : APR Utility Library: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200907-03 APR Utility Library: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the APR Utility Library: Matthew Palmer reported a heap-based buffer underflow while compiling search patterns in the...

CVE-2009-2285

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327...

CVE-2009-2285

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327...