Buffer overflow in ps in HP Tru64 UNIX 5.1a 5.1 5.0a 4.0g and 4.0f allows local users to gain privileges.


Unknown vulnerabilities in Heimdal before 0.5 with unknown impact possibly in the (1) kadmind and (2) kdc servers may allow remote or local attackers to gain root or other access but not via buffer overflows (CVE-2002-1225).


Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.


Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors.


Buffer overflow in (1) mrinfo (2) mtrace and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables which produces file descriptors larger than FD_SETSIZE which are not checked by FD_SET().


Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6 and Internet Explorer 5.01 through 6.0 allows remote attackers to execute code via a malformed HTTP request to the Data Stub.


Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 through 5.2.2 Traffic Edge 1.1.2 and 1.5.0 and Media-IXT 3.0.4 allows local users to gain root privileges via a long -path argument.


Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument.


Buffer overflow in mailcv in HP Tru64 UNIX 5.1a 5.1 5.0a 4.0g and 4.0f allows local users to gain privileges.


Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable.


Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.


Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details available regarding this issue perhaps it should be REJECTED.


Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd (2) afdcmd (3) afd_ctrl (4) init_afd (5) mafd (6) mon_ctrl (7) show_olog or (8) udc.


Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input.


Buffer overflow in lscfg of unknown versions of AIX has unknown impact.


Buffer overflow in (1) grpck and (2) pwck if installed setuid on a system as recommended in some AIX documentation may allow local users to gain privileges via a long command line argument.


Buffer overflow in binmail in HP Tru64 UNIX 5.1a 5.1 5.0a 4.0g and 4.0f allows local users to gain privileges.


Buffer overflow in quot in HP Tru64 UNIX 5.1a 5.1 5.0a 4.0g and 4.0f allows local users to gain privileges.


Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.


Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2 when the netcd daemon is running allows local users to gain privileges via unspecified vectors.


xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length which has unknown impact and attack vectors possibly related to a buffer overflow in the open_video_capture_device function in src/input/input_v4l.c.


Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2 when Role-Based Access Control is enabled allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors.


Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier and possibly other versions including 3.3.3 allows local users to gain privileges via long inputs to the (1) 0x002224A4 (2) 0x002224C0 and (3) 0x002224CC IOCTL.


Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4 when \extreme low conversion ratios\ are used allows user-assisted attackers to have an unknown impact via a crafted audio file.


Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of \the input file \ a different vulnerability than CVE-2007-2741.


Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-length header.


The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to have an unknown impact via input data that sets crafted values for certain length variables leading to a buffer overflow.


Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715 as used by MPlayer allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAX_REORDER_DELAY.


Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection aka the LGD-54XX \bitblt\ heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.


Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917 as used by MPlayer allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCA_MAX_FRAME_SIZE value.


Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3 10.0 MP1 9.2 MP3 9.1 9.0 8.1 SP6 7.0 SP7 and 6.1 SP7 allows remote attackers to affect confidentiality integrity and availability via unknown vectors. NOTE: the previous information was obtained from the October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a stack-based buffer overflow in the WebLogic Apache Connector related to an invalid parameter.


Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors possibly related to the font escape sequence.


Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors possibly related to elog.c.


Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10 SDK and JRE 1.4.x before 1.4.2_18 and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.


Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1 when vfs.usermount is enabled allows local users to gain privileges via a crafted (1) mount or (2) nmount system call related to copying of \user defined data\ in \certain error conditions.\


Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4 JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application as demonstrated by (a) an application that grants itself privileges to (1) read local files (2) write to local files or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.


Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long \message response.\


Stack-based buffer overflow in the libbecompat library in Ingres 2.6 Ingres 2006 release 1 (aka 9.0.4) and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb (2) iimerge or (3) csreport.


Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors.


Buffer overflow in nfsd in the Linux kernel before 2.6.26.4 when NFSv4 is enabled allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.


Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors.


Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619 it is not clear whether this is the same issue as CVE-2008-2785. A CVE identifier has been assigned for tracking purposes.


Buffer overflow in errpt in IBM AIX 5.2 5.3 and 6.1 allows local users to gain privileges via unknown attack vectors.


Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629 and other 4.5.0.x versions allows remote attackers to have an unknown impact via a packet with a long string in the username field.


Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg (2) ldeletepv (3) putlvodm (4) lvaryoffvg and (5) lvgenminor programs in bos.rte.lvm; and the (6) tellclvmd program in bos.clvm.enh.


Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp) as distributed in FreeBSD 6.3 and 7.0 OpenBSD 4.1 and 4.2 and the net/userppp package for NetBSD allows local users to gain privileges via long commands containing \~\ characters.


Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv0 string when executing (1) pbrun (2) pbsh or (3) pbksh. NOTE: the product is often installed in environments with trust relationships that facilitate subsequent remote compromises.


Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3 Open Source 1.6.x before 1.6.0-beta6 Business Edition C.x.x before C.1.6.1 AsteriskNOW 1.0.x before 1.0.2 Appliance Developer Kit before 1.4 revision 109386 and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a zero to an arbitrary memory location via a large RTP payload number related to the ast_rtp_unset_m_type function in main/rtp.c; or (2) write certain integers to an arbitrary memory location via a large number of RTP payloads related to the process_sdp function in channels/chan_sip.c.


Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8 10.1.0.5 10.2.0.3 and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.


Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors related to SYS.DBMS_AQJMS_INTERNAL aka DB15. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB15 is for multiple buffer overflows in the (1) AQ$_REGISTER and (2) AQ$_UNREGISTER procedures.


** DISPUTED ** Stack-based buffer overflow in the demux_nsf_send_headers function in src/demuxers/demux_nsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file a different issue than CVE-2008-1878. NOTE: a third party claims that the copyright field always has a safe length.


Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentiality integrity and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the July 2011 CPU. Oracle has not commented on claims from a reliable third party that this is a stack-based buffer overflow in the imcdr2.flt library for the CorelDRAW parser.


Buffer overflow in libpng 1.0.x before 1.0.55 1.2.x before 1.2.45 1.4.x before 1.4.8 and 1.5.x before 1.5.4 when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function allows remote attackers to overwrite memory with an arbitrary amount of data and possibly have unspecified other impact via a crafted PNG image.


Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14 2.5.x before 2.5.6 and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff.


gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw


The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments which might allow local users to conduct buffer overflow attacks and gain privileges or obtain sensitive information via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.


Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree and trick the local user into consolidating it leading to hardlink executable crash or potentially arbitrary code execution with the privileges of the user running the hardlink executable.


Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4 5.5.x before 5.5.3 6.x before 6.1.4 and 6.2.x before 6.2.2 on Windows and AIX allows local users to gain privileges via unspecified vectors.


Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.


Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4 5.5.x before 5.5.3 6.x before 6.1.4 and 6.2.x before 6.2.2 on Windows allows local users to gain privileges via unspecified vectors.


The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.


Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4 ClearQuest 7.0.0.4 through 7.1.1.4 and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone.


The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion which causes integer truncation and insufficient memory allocation and triggers a buffer overflow which allows local users to gain privileges via a crafted application related to WmiTraceMessageVa aka \Windows Kernel Integer Truncation Vulnerability.\


Buffer overflow in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) in Intel Q67 Express C202 C204 C206 Chipsets and Mobile Intel QM67 and QS67 Chipset before 2nd_gen_i5_i7_SINIT_51.BIN Express; Intel Q57 3450 Chipsets and Mobile Intel QM57 and QS57 Express Chipset before i5_i7_DUAL_SINIT_51.BIN and i7_QUAD_SINIT_51.BIN; Mobile Intel GM45 GS45 and PM45 Express Chipset before GM45_GS45_PM45_SINIT_51.BIN; Intel Q35 Express Chipsets before Q35_SINIT_51.BIN; and Intel 5520 5500 X58 and 7500 Chipsets before SINIT ACM 1.1 allows local users to bypass the Trusted Execution Technology protection mechanism and perform other unspecified SINIT ACM functions via unspecified vectors.


Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto Snapdragon Compute Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music


Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon IoT Snapdragon Voice & Music Snapdragon Wearables


Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Wearables


Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Mobile Snapdragon Wired Infrastructure and Networking


Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile


Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile


Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto


Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Wearables


Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer Electronics Connectivity


Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.


Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.


Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.


Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page.


Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit heap corruption via a crafted HTML page.


heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.


Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.


Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.


Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.


Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.


Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.


Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


A

buffer

overflow

in

ecma_builtin_typedarray_prototype_filter()

in

JerryScript

version

allows

an

attacker

to

construct

a

fake

object

or

a

fake

arraybuffer

with

unlimited

size.


Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.


Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page.


Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.


Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.


Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via specific user gesture.


Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.


heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.


Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.


Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software Bypass Protection Mechanism Modify Memory and possible remote execution


Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.


Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.


MIME buffer overflow in email clients e.g. Solaris mailtool and Outlook.


A buffer overflow in lsof allows local users to obtain root privilege.


A buffer overflow in the SGI X server allows local users to gain root access through the X server font path.


Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.


Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.


Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac Windows and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.


A buffer overflow in WebGL triggerable by web content resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1 Firefox ESR < 45.9 Firefox ESR < 52.1 and Firefox < 53.


Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page related to WebGL.


A buffer overflow in glibc 2.5 (released on September 29 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.


Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.


Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header.


Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile Snapdragon Mobile in versions MSM8996AU SD 425 SD 430 SD 450 SD 625 SD 820 SD 820A SD 835 SD 845 SD 850 SDA660 SDA845 SDX24 SXR1130.


Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile Snapdragon Mobile in MSM8996AU SD 450 SD 625 SD 820 SD 820A SD 835 SD 845 SD 850 SDA660


Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.


Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.


A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1 16.15.1 17.9.1 and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP 181 responses.


Heap

buffer

overflow

in

the

fxCheckArrowFunction

function

at

in

Moddable

SDK

before


Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.


Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet.


Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.


A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted patch file.


Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.


A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe usage of fscanf because it does not limit the number of characters to be read in a format argument.


Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack.


A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call.


A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds write when processing malformed local videos with E-AC-3 audio streams.


Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to execute code.


A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer resulting in a potentially exploitable crash. This vulnerability affects Firefox < 50.1.


Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3.18. Android ID: A-31625204. References: QC-CR#1027804.


Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18. Android ID: A-31625904. References: QC-CR#1027769.


Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. Versions: Kernel 3.18. Android ID: A-32577972. References: QC-CR#988462.


Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android. Versions: Kernel 3.18. Android ID: A-31625306. References: QC-CR#1036747.


A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3 macOS Mojave 10.14.3 tvOS 12.1.2 watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.


A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.2 macOS Mojave 10.14.4 watchOS 5.2. A malicious application may be able to elevate privileges.


A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.


Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.


Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0 4.9.5 and 4.4.9.


Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted project file could allow an attacker to exploit and execute code under the privileges of the application.


Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks.


A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloud_config/cloud_device/info interface which allows a malicious user to executee arbitrary code on the system via a crafted post request.


A

Buffer

Overflow

vulnerability

exists

in

TP-LINK

via

the

interface.


A buffer overflow vulnerability in the AT command interface of Gigaset DX600A v41.00-175 devices allows remote attackers to force a device reboot by sending relatively long AT commands.


A Buffer Overflow vulnerability exists in zlog 1.2.15 via zlog_conf_build_with_file in src/zlog/src/conf.c.


A Buffer Overflow vulnerability exists in the latest version of Miniftpd in the do_retr function in ftpproto.c


A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value.


A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel_packet_examin function in babeld/message.c.


A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin function in babeld/message.c.


A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.


A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe in Schneider Electric's SoMachine HVAC v2.1.0 for Modicon M171/M172 Controller.


A buffer overflow vulnerability was discovered in the OpenPLC controller in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO() function which can cause a runtime crash of the PLC or possibly have unspecified other impact.


A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.


A

buffer

overflow

vulnerability

in

the

icmp6_send_response_with_addrs_and_netif()

function

of

Free

Software

Foundation

lwIP

version

git

head

allows

attackers

to

access

sensitive

information

via

a

crafted

packet.


A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet.


A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot.


A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.


A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the run_interpreter function.


A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51.


A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51.


A buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitrary code execution on a system running it.


A buffer overflow vulnerability in FTPDMIN 0.96 allows attackers to crash the server via a crafted packet.


A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers (including low integrity processes) can exploit this to gain NT AUTHORITY\\SYSTEM privileges.


A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges.


A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2 macOS Mojave 10.14.4 tvOS 12.2 watchOS 5.2 iTunes 12.9.4 for Windows iCloud for Windows 7.11. A malicious application may be able to elevate privileges.


A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2 macOS Mojave 10.14.4 tvOS 12.2 watchOS 5.2. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.


A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device.


A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the client code when processing a malformed IE length of HT capability information in the Beacon and Association response frame.


A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7 macOS Big Sur 11.5 watchOS 7.6 tvOS 14.7 Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution.


A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.


A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output or a special program could corrupt memory and crash Screen or possibly have unspecified other impact.


A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6 Security Update 2020-004 Mojave Security Update 2020-004 High Sierra. A buffer overflow may result in arbitrary code execution.


A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write affecting the availability of the service or integrity of data.


Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging printq group membership.


Multiple buffer overflows in mqm programs in IBM WebSphere MQ 7.0.x before 7.0.1.11 7.1.x before 7.1.0.3 and 7.5.x before 7.5.0.2 on non-Windows platforms allow local users to gain privileges via unspecified vectors.


Two buffer overflows in the built-in web server in Moxa NPort IAW5000A-I/O Series firmware version 2.2 or earlier may allow a remote attacker to cause a denial-of-service condition.


Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.


Multiple buffer overflows in Google Picasa have unspecified attack vectors and impact. NOTE: this information is based upon a vague pre-advisory.


Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors involving the (1) chpath (2) rmpath and (3) devinstall programs in bos.rte.methods.


Multiple buffer overflows in unspecified svprint (System V print) commands in bos.svprint.rte in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors.


Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.


Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1 and possibly other distributions have unknown impact and attack vectors related to \improper string length calculations.\


Multiple buffer overflows in Nickolas Grigoriadis Mini Web server (MiniWebsvr) before 0.05 have unknown impact and attack vectors.


Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application aka Android internal bug 28573112 and Qualcomm internal bug CR548872.


Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a (1) CFG or (2) DAT file.


Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry.


Multiple buffer overflows in IBM Rational ClearCase 7.x before 7.1.2.13 8.0.0.x before 8.0.0.10 and 8.0.1.x before 8.0.1.3 allow remote authenticated users to obtain privileged access via unspecified vectors.


Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain privileges via unspecified vectors.


Multiple buffer overflows in ha.c in the mipv6 daemon in UMIP 0.4 allow remote attackers to have an unspecified impact via a crafted (1) ND_OPT_PREFIX_INFORMATION or (2) ND_OPT_HOME_AGENT_INFO packet.


Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data which is improperly demarshalled.


Multiple

buffer

overflows

in

the

and

function

in

file

before


Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors.


Multiple buffer overflows in xtokkaetama 1.0 allow local users to gain privileges via a long (1) -display command line argument or (2) XTOKKAETAMADIR environment variable.


Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments as demonstrated with the -osa_rom argument.


Multiple buffer overflows in Orville Write (orville-write) 2.53 and earlier allow local users to gain privileges.


Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments.


Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group \games\ privileges via long command line arguments to crafty.bin.


Multiple buffer overflows in hztty 2.0 allow local users to gain root privileges.


Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.


Multiple buffer overflows in the (1) dbm_open function as used in ndbm and dbm and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions.


Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands.


Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c.


Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.


Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges.


Multiple buffer overflows in (1) phrelay-cfg (2) phlocale (3) pkg-installer or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter.


Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges.


Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.


Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable or (2) a long -xsokdir command line argument a different vulnerability than CVE-2003-0949.


Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.


Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.


Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages.


Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.


Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long command line argument or (2) setting the -c option of /etc/nu to the name of a file containing a long line.


Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2 and 6.2 before 6.2.4.5 has unknown impact and user-assisted attack vectors via a crafted SGI image.


Multiple buffer overflows in TIN before 1.8.2 have unspecified impact and attack vectors a different vulnerability than CVE-2006-0804.


Multiple buffer overflows in Firebird 1.5 one of which affects WNET have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240.


Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network cat_paraller and cat_serial commands.


Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem a related issue to CVE-2009-4020.


Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors.


Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.


Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.


Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.


Multiple

buffer

overflows

in

HP

UNIX

and

allow

local

users

to

gain

privileges

via

lpc

lpd

lpq

lpr

or

lprm.


Multiple buffer overflows in rogue on NetBSD 1.6 and earlier FreeBSD 4.6 and possibly other operating systems allows local users to gain \games\ group privileges via malformed entries in a game save file.


Multiple

buffer

overflows

in

HP

UNIX

and

allow

local

users

to

gain

root

privileges

via

su

chsh

passwd

chfn

dxchpwd

and

libc.


Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17 and 0.2.x before 0.2.15 allow local users to gain privileges via certain entries in the configuration file (-C option).


Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.


Multiple buffer overflows in Heimdal before 0.5 possibly in both the (1) kadmind and (2) kdc servers may allow remote attackers to gain root access.


Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified vectors related to \parsing of http headers.\


Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) swap (2) swapoff and (3) swapon programs.


Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability during scan operations with a long SSID value.


Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command.


Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 which triggers a buffer overflow.


Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer overflow via unspecified attack vectors.


ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.


Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS) 7.20 7.20EXT 7.45 7.49 7.53.


A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.


IBM DB2 for Linux UNIX and Windows (includes DB2 Connect Server) 9.7 10.1 10.5 and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152858.


IBM DB2 for Linux UNIX and Windows (includes DB2 Connect Server) 9.7 10.1 10.5 and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152859.


IBM DB2 for Linux UNIX and Windows (includes DB2 Connect Server) 10.1 10.5 and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 146364.


fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.


fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.


fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.


fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.


fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.


Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow which may allow an attacker to achieve code execution.


Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data when parsing VPR files is too small.


Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.


An error within the \rollei_load_raw()\ function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash.


Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.


Adobe Flash Player versions 23.0.0.207 and earlier 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class for specific search strategies. Successful exploitation could lead to arbitrary code execution.


A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context.


A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.


A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value.


A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow was found in PutLE16(). The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.


In GIMP 2.8.22 there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.


In GIMP 2.8.22 there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.


In GNU Libextractor 1.4 there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c related to processiTXt and stndup.


Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c.


samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file.


Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file.


Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source file.


GnuCOBOL 2.2 has a heap-based buffer overflow in read_literal in cobc/scanner.l via crafted COBOL source code.


MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.


Brandy 1.20.1 has a heap-based buffer overflow in define_array in variables.c via crafted BASIC source code.


AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.


AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.


AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.


PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.


ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg because deinterlacing for small pictures is mishandled.


ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg because deinterlacing for small pictures is mishandled.


PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.


Wasm3 0.5.0 has a heap-based buffer overflow in op_Const64 (called from EvaluateExpression and m3_LoadModule).


Grok

has

a

heap-based

buffer

overflow

in

(called

from

and


Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c).


GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12.


GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12.


Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.


QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.


FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.


ATasm 1.06 has a stack-based buffer overflow in the to_comma() function in asm.c via a crafted .m65 file.


ATasm 1.06 has a stack-based buffer overflow in the get_signed_expression() function in setparse.c via a crafted .m65 file.


ATasm 1.06 has a stack-based buffer overflow in the parse_expr() function in setparse.c via a crafted .m65 file.


GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_program_id in cobc/typeck.c via crafted COBOL source code.


Brandy 1.20.1 has a stack-based buffer overflow in fileio_openout in fileio.c via crafted BASIC source code.


Brandy 1.20.1 has a stack-based buffer overflow in fileio_openin in fileio.c via crafted BASIC source code.


GnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via crafted COBOL source code.


XnView 2.03 has a stack-based buffer overflow vulnerability


Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c a different vulnerability than CVE-2018-11440.


Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.


Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.


Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.


Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c a different vulnerability than CVE-2018-11440.


libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.


Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow.


There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability.


There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.


There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.


There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10 a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses).


There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file.


There is a heap-based buffer overflow vulnerability in some Huawei Smartphone Successful exploit of this vulnerability can cause process exceptions during updating.


There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execution when a buffer overflow occurs.


GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c.


GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box.


libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876.


An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the '<order type=\real\>' substring as demonstrated by testmxml.


An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_publisher.c.


An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c.


An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette.


An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap.


An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.


An issue has been found in jpeg_encoder through 2015-11-27. It is a heap-based buffer overflow in the function readFromBMP in jpeg_encoder.cpp.


An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp called from parse_doc in parse_doc.cpp.


An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc.


An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6 0.3.5 0.3.4 0.3.3 0.3.2 0.3.1 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.


A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc.


An

issue

was

found

in

Linux

kernel

before

in

allows

a

remote

AP

to

trigger

a

heap-based

buffer

overflow

because

of

an

incorrect

memcpy

aka


Various Lexmark products have a Buffer Overflow (issue 2 of 3).


Various Lexmark products have a Buffer Overflow (issue 3 of 3).


D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request.


D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_8004776c in /formVirtualServ. This vulnerability is triggered via a crafted POST request.


D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80046eb4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request.


D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80040af8 in /formWlanSetup. This vulnerability is triggered via a crafted POST request.


D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_800462c4 in /formAdvFirewall. This vulnerability is triggered via a crafted POST request.


D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_8003183C in /fromLogin. This vulnerability is triggered via a crafted POST request.


D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_8004776c in /formVirtualApp. This vulnerability is triggered via a crafted POST request.


D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80034d60 in /formStaticDHCP. This vulnerability is triggered via a crafted POST request.


Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature.


TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.


TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.


TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.


TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.


In macOS High Sierra before 10.13.5 a buffer overflow was addressed with improved size validation.


In macOS High Sierra before 10.13.5 a buffer overflow was addressed with improved bounds checking.


Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c.


Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs_mk_string at mjs/src/mjs_string.c.


Cesanta

MJS

was

discovered

to

contain

a

heap

buffer

overflow

via

/usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53.


Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c.


Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c.


Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src/common/str_util.c.


Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c.


Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c.


Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c.


Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c.


OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c.


OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable/xs/sources/xsDataView.c.


OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c.


OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function at /moddable/xs/sources/xsString.c.


Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted request which triggers a buffer overflow.


An off-by-one error within the \LibRaw::kodak_ycbcr_load_raw()\ function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash.


In Omron CX-Supervisor Versions 3.30 and prior parsing malformed project files may cause a heap-based buffer overflow.


In Omron CX-Supervisor Versions 3.30 and prior parsing malformed project files may cause a stack-based buffer overflow.


Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel). The component is: optee_os. The fixed version is: 3.4.0 and later.


Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core (kernel). The component is: optee_os. The fixed version is: 3.4.0 and later.


Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution of code in TEE core (kernel) context. The component is: optee_os. The fixed version is: 3.4.0 and later.


Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3 8.1.x before 8.1.2.6 and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors.


Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.


Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.


Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.


Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.


Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).


Buffer overflow in CDE libDtSvc on HP-UX B.11.00 B.11.04 B.11.11 and B.11.22 allows local users to gain root privileges via unknown vectors.


Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files aka Bug ID CSCub67693.


Buffer overflow in Cisco 7xx routers through the telnet service.


Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.


Buffer overflow in FreeBSD gdc program.


Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.


Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.


Buffer overflow in FreeBSD angband allows local users to gain privileges.


Buffer overflow in FreeBSD lpd through long DNS hostnames.


Buffer overflow in IBM Rational ClearCase through 7.1.2.12 8.0.0.x before 8.0.0.9 and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unspecified vectors.


Buffer overflow in IBM i Access 7.1 on Windows allows local users to gain privileges via unspecified vectors.


Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.


Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.


Buffer overflow in Internet Explorer 4.0 via EMBED tag.


Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.


Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.


Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.


Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.


Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.


Buffer overflow in Microsoft Phone Dialer (dialer.exe) via a malformed dialer entry in the dialer.ini file.


Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter.


Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.


Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.


Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.


Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.


Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.


Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.


Buffer overflow in Solaris dtprintinfo program.


Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.


Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.


Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.


Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access.


Buffer overflow in Solaris lpset program allows local users to gain root access.


Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.


Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.


Buffer overflow in Solaris fdformat command gives root access to local users.


Buffer overflow in the SCSI implementation in QEMU as used in Xen when a SCSI controller has more than 256 attached devices allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.


Buffer overflow in the rle_decode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted LucasArts Smush video data.


Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0 Firefox ESR 17.x before 17.0.5 Thunderbird before 17.0.5 and Thunderbird ESR 17.x before 17.0.5 on Windows allows local users to gain privileges via crafted arguments.


Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message aka the \Still Image Service Privilege Escalation\ vulnerability.


Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system.


Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.


Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.


Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.


Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter.


Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.


Buffer overflow in the conversion utilities for Japanese Korean and Chinese Word 5 documents allows an attacker to execute commands aka the \Malformed Conversion Data\ vulnerability.


Buffer overflow in the swcons command in bos.rte.console in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors a different vulnerability than CVE-2005-3504 and CVE-2007-0978.


Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact resulting in a \crashing stack.\


Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors.


Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.


Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain root privileges.


Buffer overflow in the pioout program in printers.rte in IBM AIX 5.2 5.3 and 6.1 allows local users to gain privileges via a long command line option.


Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.


Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.


Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable.


Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.


Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors possibly related to \/\ (slash) characters.


Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold SP1 and SP2; and Vista allows local users to gain privileges via a crafted Enhanced Metafile (EMF) image format file.


Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7 and 5.x before 5.2.2 has unknown impact and remote attack vectors.


Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold SP1 and SP2; and Vista allows local users to gain privileges via certain \color-related parameters\ in crafted images.


Buffer overflow in the crack extension (CrackLib) as bundled with PHP 4.4.6 and other versions before 5.0.0 might allow local users to gain privileges via a long argument to the crack_opendict function.


Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.


Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.


Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name.


Buffer overflow in the Data Transfer Program in IBM i Access 5770-XE1 5R4 6.1 and 7.1 on Windows allows local users to gain privileges via unspecified vectors.


Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors.


Buffer overflow in the message-protocol implementation in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7 and 6.1.0.0 allows remote attackers to read and modify data and possibly have other impact via an unspecified command.


Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.


Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.


Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box.


Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.


Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A 2.0 1.9 and earlier has unknown impact and attack vectors.


Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup.


Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.


Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.


Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.


Buffer overflow in the bootp server in the Debian Linux netstd package.


Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.


Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0 as used in SquirrelMail allows local users to gain root privileges via a long user name.


Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.


Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.


Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet.


Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.


Buffer overflow in the \megasas_mmio_write\ function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.


Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name.


Buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 has unspecified impact and remote attack vectors.


Buffer overflow in the UniformTypeIdentifiers component in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted Uniform Type Identifier.


Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l 0.9.8 before 0.9.8d and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.


Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote attackers to change the registration information of other players via a long string.


Buffer overflow in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote attackers to have an unknown impact via unknown attack vectors.


Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2 as used in Symantec Ghost Solutions Suite (SGSS) 1.0 might allow local users to read certain sensitive information from the database.


Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10 allows local users to gain privileges via a long _XKB_CHARSET environment variable value.


Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8 4.0G PK4 and 5.1A PK6 allows local users to gain root privileges via a long PTHREAD_CONFIG environment variable.


Buffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str parameter.


Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.DLL) in Novell Client 4.91 has unknown impact and remote attack vectors.


Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable.


Buffer overflow in the find_default_type function in libsecure in NSA Security-enhanced Linux which may allow attackers to modify critical data in memory.


Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a \transfer job\ routine.


Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors.


Buffer overflow in the WDDM display driver in VMware ESXi 4.0 4.1 and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors.


Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN_NAME string in a plug-in configuration file.


Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.


Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.


Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.


Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to gain privileges via a crafted application aka Android internal bug 32639452 and Qualcomm internal bug CR1079713.


Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3 when using the \cmd:\ batch mode syntax allows attackers to have unspecified impact via a long command string.


Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.


Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.


Buffer overflow in the font processing component of Microsoft Windows 2000 Windows XP SP1 and SP2 and Windows Server 2003 allows local users to gain privileges via a specially-designed application.


Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.


Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35 as used in products such as KchmViewer has unknown impact and attack vectors.


Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via crafted IKE packets as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.


Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system.


Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.


Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6 7 and 8 allows local users to gain root privileges via a long mount argument.


Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.


Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument.


Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.


Buffer overflow in the diagnostics library in AIX allows local users to \cause data and instructions to be overwritten\ via a long DIAGNOSTICS environment variable.


Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an \invalid beacon/probe response.\


Buffer overflow in the listing module in Netwide Assembler (NASM) before 2.03.01 has unknown impact and attack vectors a different vulnerability than CVE-2008-2719.


Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.


Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an \invalid Content-Length.\


Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors.


Buffer overflow in the uspchrp program in devices.chrp.base.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors.


Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors and an impact probably involving \invalid memory access.\


Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value a similar issue to CVE-2006-4484.


Buffer overflow in the inspector serialization functionality in Google Chrome before 13.0.782.107 allows user-assisted remote attackers to have an unspecified impact via unknown vectors.


Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument a different vulnerability than CVE-2011-2483.


Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 possibly related to XBM/xkbcomp capabilities.


Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0 UnixWare 7.1.1 and possibly other operating systems allows local users to gain root privileges via a long -xrm argument to programs such as (1) dtterm or (2) xterm.


Buffer overflow vulnerability in Autodesk FBX Software Development Kit version 2019.5. A user may be tricked into opening a malicious FBX file which may exploit a buffer overflow vulnerability causing it to run arbitrary code on the system.


Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.


Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors.


Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate packet from a VNC server.


Buffer

overflow

vulnerability

in

file

in

function

ecma_builtin_array_prototype_object_slice

in

Jerryscript

before

commit

on

Oct


Buffer Overflow vulnerability in QTS 4.3.5 build 20181013 QTS 4.3.4 build 20181008 QTS 4.3.3 build 20180829 QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS.


Buffer overflow vulnerability in Core FTP Server v2 Build 697 via a crafted username.


Buffer overflow vulnerability in Core FTP Server v1.2 Build 583 via a crafted username.


Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5 allows attackers to cause a denail of service when trying to calloc an unexpectiedly large space.


coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast which triggers a heap-based buffer overflow.


ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.


ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.


ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.


ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.


ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error.


ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows.


ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors.


In Qualcomm Android for MSM Firefox OS for MSM and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05 while processing a 802.11 management frame a buffer overflow may potentially occur.


In Qualcomm Android for MSM Firefox OS for MSM and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05 a buffer overflow vulnerability exists in WLAN while processing an extscan hotlist event.


NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user.


On Samsung mobile devices with N(7.x) software a buffer overflow in the vision service allows code execution in a privileged process via a large frame size aka SVE-2017-11165.


Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.


IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer overflow caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199247.


IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow caused by improper bounds. An authenticared user could overflow the buffer and cause the service to crash. IBM X-Force ID: 197882.


IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199249.


A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via buffer overflow.


SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.


A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format because srt_to_ass in libavcodec/srtdec.c misuses snprintf.


Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file related to the scheduler.


A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18_multi device via the list parameter in a post request in goform/SetIpMacBind.