26 November 2008

23 results · Feed

• Unscored —
  CVE-2008-2378

  Untrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain privileges via a Trojan …

  Nov 26, 2008
• Unscored —
  CVE-2008-5162

  The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time…

  Nov 26, 2008
• Unscored —
  CVE-2008-2431 EPSS 51%

  Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute arbitrary code by calli…

  Nov 26, 2008
• Unscored —
  CVE-2008-2429

  Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL…

  Nov 26, 2008
• Unscored —
  CVE-2008-2432

  Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client befor…

  Nov 26, 2008
• Unscored —
  CVE-2008-5244

  Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due…

  mplayer faad2 Debian
  Nov 26, 2008
• Unscored —
  CVE-2008-5246

  Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute arbitrary code via vec…

  Nov 26, 2008
• Unscored —
  CVE-2008-5238

  Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other versions before 1.1.15, …

  Nov 26, 2008
• Unscored —
  CVE-2008-5237

  Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to cause a…

  Nov 26, 2008
• Unscored —
  CVE-2008-5231

  Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell i…

  Nov 26, 2008
• Unscored —
  CVE-2008-5242

  demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count field before calling …

  Nov 26, 2008
• Unscored —
  CVE-2008-5235

  Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in xine-lib before 1.1.15…

  Nov 26, 2008
• Unscored —
  CVE-2008-5236

  Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers …

  Nov 26, 2008
• Unscored —
  CVE-2008-5241

  Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to c…

  Nov 26, 2008
• Unscored —
  CVE-2008-5248

  xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3 files with metadata consis…

  Nov 26, 2008
• Unscored —
  CVE-2008-5240

  xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to determine the memory allo…

  Nov 26, 2008
• Unscored —
  CVE-2008-5245

  xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknow…

  Nov 26, 2008
• Unscored —
  CVE-2008-5239

  xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values durin…

  Nov 26, 2008
• Unscored —
  CVE-2008-5247

  The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, …

  Nov 26, 2008
• Unscored —
  CVE-2008-5243

  The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an…

  Nov 26, 2008
• Unscored —
  CVE-2008-5232 Public exploit EPSS 32%

  Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.…

  Nov 26, 2008
• Unscored —
  CVE-2008-5234

  Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to ex…

  Nov 26, 2008
• Unscored —
  CVE-2008-5233

  xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) …

  Nov 26, 2008