3350 matches found
CVE-2006-3463
The EstimateStripByteCounts function in TIFF library libtiff before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop...
DSA-1137-1 tiff - several vulnerabilities
Bulletin has no description...
CVE-2006-3253
Cross-site scripting XSS vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter. NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that "the userid parameter is run...
JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space
Hi y'all, Quite a while ago I was testing with applets and found this by accident. It is definitely not a big issue, but worth to mention, as I discovered that an applet was eating up all the free space on the harddrive by allocating a large file in the users hidden temp dir filename is something...
USN-264-1: gnupg vulnerability
Tavis Ormandy discovered a flaw in gnupg's signature verification. In some cases, certain invalid signature formats could cause gpg to report a 'good signature' result for auxiliary unsigned data which was prepended or appended to the checked message part...
security flaw
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different...
Fedora Core 4 : gnupg-1.4.2.2-1 (2006-147)
Tavis Ormandy discovered a flaw in the way GnuPG verifies cryptographically signed data with inline signatures. It is possible for an attacker to add unsigned text to a signed message in such a way so that when the signed text is extracted, the unsigned text is extracted as well, appearing as if ...
CVE-2006-0049
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different...
CVE-2006-0049
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different...
GnuPG unsigned data injection
While decoding non-detached with signature within text messages unsigned data behind signature is invalidely decoded as a part of the messages...
GnuPG does not detect injection of unsigned data
GnuPG does not detect injection of unsigned data ================================================ released 2006-03-09, CVE-2006-0049 Summary ======= In the aftermath of the false positive signature verfication bug announced 2006-02-15 more thorough testing of the fix has been done and another...
GnuPG does not detect injection of unsigned data
Werner Koch reports: In the aftermath of the false positive signature verfication bug announced 2006-02-15 more thorough testing of the fix has been done and another vulnerability has been detected. This new problem affects the use of gpg for verification of signatures which are not detached...
security flaw
The procfs code procmisc.c in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value...
ASP.NET __VIEWSTATE function replay attack
Data is stored signed on client side, but host name and timestamp are not part of signed data...
up-imapproxy multiple bugs
Signed/unsigned conversion and memory management bugs...
TeamFactor integer overflow
Integer overflow on signed/unsigned conversion...
[Full-Disclosure] Cross Site Java applets
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cross-Site Java breaks Sandbox Isolation for Unsigned Applets ============================================================= Product : Java Plugin Version : 1.4.201 OS : Win32 should apply for other OSs too URL : http://java.sun.com Found by : Marc...
Sun Java Plugin 1.4.2 _01 - Cross-Site Applet Sandbox Security Model Violation
Sun Java Plugin 1.4.2 01 - Cross-Site Applet Sandbox Security Model Violation source: https://www.securityfocus.com/bid/8857/info A vulnerability has been reported in Java implementations that may potentially allow Java applets from two different domains to violate the sandbox security model and...