CWE-120 Archives - CVE Vulnerability

CVE-2008-3496

Sun, 26 Feb 2023 09:10:02 +0000

Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors.

The post CVE-2008-3496 appeared first on CVE Vulnerability.

CVE-2008-3275

Sun, 26 Feb 2023 09:09:56 +0000

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service (“overflow” of the UBIFS orphan area) via a series of attempted file creations within deleted directories.

The post CVE-2008-3275 appeared first on CVE Vulnerability.

CVE-2008-3142

Sun, 26 Feb 2023 09:09:52 +0000

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.

The post CVE-2008-3142 appeared first on CVE Vulnerability.

CVE-2008-1887

Sun, 26 Feb 2023 09:09:14 +0000

Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.

The post CVE-2008-1887 appeared first on CVE Vulnerability.

CVE-2008-1677

Sun, 26 Feb 2023 09:09:08 +0000

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.

The post CVE-2008-1677 appeared first on CVE Vulnerability.

CVE-2007-2809

Sun, 26 Feb 2023 09:06:28 +0000

Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file. NOTE: due to the lack of details, it is not clear if this is the same issue as CVE-2007-2274.

The post CVE-2007-2809 appeared first on CVE Vulnerability.

CVE-2007-1887

Sun, 26 Feb 2023 09:06:03 +0000

Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqlite_udf_decode_binary function with a 0x01 character.

The post CVE-2007-1887 appeared first on CVE Vulnerability.

CVE-2007-0803

Sun, 26 Feb 2023 09:05:37 +0000

Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to (1) “print floats” and (2) a missing null termination in the “rope constructor.”

The post CVE-2007-0803 appeared first on CVE Vulnerability.

CVE-2007-0455

Sun, 26 Feb 2023 09:05:29 +0000

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

The post CVE-2007-0455 appeared first on CVE Vulnerability.

CVE-2018-9333

Sun, 26 Feb 2023 06:51:48 +0000

K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.

The post CVE-2018-9333 appeared first on CVE Vulnerability.