CVE-2009-2643

The connected Red Hat and NVD entries confirm CVE-2009-4778 and related disclosures affect the PDF distiller in the Attachment Service of Research In Motion (RIM) BlackBerry BES and BlackBerry Professional Software. A crafted PDF file attachment can lead to a denial of service (memory corruption)...

openSUSE Security Update : amarok (amarok-436)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

GLSA-200907-07 : ModPlug: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-07 ModPlug: User-assisted execution of arbitrary code Two vulnerabilities have been reported in ModPlug: dummy reported an integer overflow in the CSoundFile::ReadMed function when processing a MED file with a crafted song...

GLSA-200907-11 : GStreamer plug-ins: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-11 GStreamer plug-ins: User-assisted execution of arbitrary code Multiple vulnerabilities have been reported in several GStreamer plug-ins: Tobias Klein reported two heap-based buffer overflows and an array index error in t...

CVE-2009-2384

Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained from third party information...

GLSA-200907-01 : libwmf: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-01 libwmf: User-assisted execution of arbitrary code The embedded fork of the GD library introduced a 'use-after-free' vulnerability in a modification which is specific to libwmf. Impact : A remote attacker could entice a...

CVE-2009-2286

Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service crash via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch...

CVE-2009-2261

PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | pipe characters and a command...

Stack overflow

Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted 1 m3u or 2 pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2009-2225

CVE-2009-2225 refers to a stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 (trial) that allows remote code execution via crafted playlist files (1) m3u or (2) pls). The vulnerability description and related sources indicate the overflow occurs in playlist parsing, enabling arbitrar...

CVE-2009-2225

Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted 1 m3u or 2 pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2009-1835

Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with...

CVE-2009-1718

WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors involving drag events and the dragging of content over a crafted web page...

CVE-2009-0239

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

CVE-2009-1718

Removed by vendor...

CVE-2009-1714

Removed by vendor...

GLSA-200905-02 : Cscope: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200905-02 Cscope: User-assisted execution of arbitrary code James Peach of Apple discovered a stack-based buffer overflow in cscope's handling of long file system paths CVE-2009-0148. Multiple stack-based buffer overflows were...

CVE-2009-1674

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...

Stack overflow

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...

CVE-2009-1674

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...