tavis ormandy vulnerabilities and exploits

(subscribe to this query)

QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction.

Qemu Qemu 0.8.2 Debian Debian Linux 3.1 Debian Debian Linux 4.0

QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error.

Qemu Qemu 0.8.2 Debian Debian Linux 3.1 Debian Debian Linux 4.0

Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to "attempting to mark non-e...

Qemu Qemu 0.8.2 Fedoraproject Fedora 8 Fedoraproject Fedora 9 Fedoraproject Fedora Core 6 Opensuse Opensuse 11.0 Opensuse Opensuse 11.1 Debian Debian Linux 3.1 Debian Debian Linux 4.0

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2893. Reason: this candidate was intended for one issue, but some sources used this identifier for a separate issue, and a duplicate identifier had also been created by the time dual use was detected. Notes: ...

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness erro...

Qemu Qemu 0.8.2 Fedoraproject Fedora 7 Fedoraproject Fedora Core 6 Debian Debian Linux 3.1 Debian Debian Linux 4.0

PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (dblink) is installed, allows remote malicious users to access arbitrary accounts and execute arbitrary SQL queries via a dblink host parameter that proxies the co...

Postgresql Postgresql Debian Debian Linux 3.1 Debian Debian Linux 4.0

The regular expression parser in TCL prior to 8.4.17, as used in PostgreSQL 8.2 prior to 8.2.6, 8.1 prior to 8.1.11, 8.0 prior to 8.0.15, and 7.4 prior to 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.

Postgresql Postgresql 7.3 Postgresql Postgresql 7.3.1 Postgresql Postgresql 7.3.2 Postgresql Postgresql 7.3.3 Postgresql Postgresql 7.3.4 Postgresql Postgresql 7.3.6 Postgresql Postgresql 7.3.8 Postgresql Postgresql 7.3.9 Postgresql Postgresql 7.3.10 Postgresql Postgresql 7.3.11 Postgresql Postgresql 7.3.12 Postgresql Postgresql 7.3.13

The regular expression parser in TCL prior to 8.4.17, as used in PostgreSQL 8.2 prior to 8.2.6, 8.1 prior to 8.1.11, 8.0 prior to 8.0.15, and 7.4 prior to 7.4.19, allows context-dependent malicious users to cause a denial of service (infinite loop) via a crafted regular expressio...

Postgresql Postgresql Tcl Tcl/tk Debian Debian Linux 3.1 Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 6.10 Canonical Ubuntu Linux 7.04 Canonical Ubuntu Linux 7.10

Multiple buffer overflows in ImageMagick prior to 6.2.9 allow user-assisted malicious users to execute arbitrary code via crafted XCF images.

Imagemagick Imagemagick 6.2 Imagemagick Imagemagick 6.2.0.4 Imagemagick Imagemagick 6.2.0.7 Imagemagick Imagemagick 6.2.0.8 Imagemagick Imagemagick 6.2.1 Imagemagick Imagemagick 6.2.1.7 Imagemagick Imagemagick 6.2.2 Imagemagick Imagemagick 6.2.2.5 Imagemagick Imagemagick 6.2.3 Imagemagick Imagemagick 6.2.3.6 Imagemagick Imagemagick 6.2.4 Imagemagick Imagemagick 6.2.4.5

Algorithmic complexity vulnerability in the regular expression parser in TCL prior to 8.4.17, as used in PostgreSQL 8.2 prior to 8.2.6, 8.1 prior to 8.1.11, 8.0 prior to 8.0.15, and 7.4 prior to 7.4.19, allows remote authenticated users to cause a denial of service (memory consum...

Postgresql Postgresql 7.3 Postgresql Postgresql 7.3.1 Postgresql Postgresql 7.3.2 Postgresql Postgresql 7.3.3 Postgresql Postgresql 7.3.4 Postgresql Postgresql 7.3.6 Postgresql Postgresql 7.3.8 Postgresql Postgresql 7.3.9 Postgresql Postgresql 7.3.10 Postgresql Postgresql 7.3.11 Postgresql Postgresql 7.3.12 Postgresql Postgresql 7.3.13

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook