“Chew Keong TAN has reported a vulnerability in
BlackJumboDog, potentially allowing malicious people to compromise a
vulnerable system….This has been reported in version 3.6.1.
Prior versions may also be affected. Solution: Reportedly, the
vulnerability has been fixed in version 3.6.2.”…
“AbiWord is affected by a vulnerability in the
“wv” library, which potentially can be exploited by
malicious people to compromise a user’s system….Solution:
Update to version 2.0.8 or later.
http://www.abisource.com/download/.”…
“Luigi Auriemma has reported a vulnerability in Medal of
Honor, allowing malicious people to gain system access….The
following versions has been reported vulnerable: Allied Assault 1.11v9
and prior; Breakthrough 2.40b and prior; Spearhead 2.15 and
prior….Solution: Do not play games on production
systems.”…
wvWare Library Buffer Overflow Vulnerability
wvWare Library Buffer Overflow Vulnerability07/10/2004 11:24 PM “Caolán McNamara and Dom Lachowicz’s wvWare is a library used to
load and
parse Microsoft Word files on unix-based systems. wvWare is used in
some
third-party programs to view and convert Microsoft Word documents to
other formats….[It] has been found to contain a buffer overflow
condition that can be exploited through a specially crafted
document….If an attacker can convince a user to open an exploit
document in HTML
mode using an application that builds upon the wv library, it is
possible for the attacker to execute arbitrary code under the
privileges
of that user….Dom Lachowicz has posted…patch
details…”
“CRITICAL: Moderately critical IMPACT: System access WHERE:
From remote Komrade has reported a vulnerability in Trillian, which
can be exploited by malicious people to compromise a user’s
system. The vulnerability is caused due to a boundary error within the
MSN module. This can be exploited to cause a buffer overflow by
passing an overly long string (about 4096 bytes) from a MSN messenger
server. Successful exploitation requires that a malicious person
either intercepts and manipulates…
Re: Remote buffer overflow in Apache mod_ssl when reverse proxying SSL
Oracle9i Database Buffer Overflow Vulnerability in iSQL*Plus
Oracle9i Database Buffer Overflow Vulnerability in iSQL*Plus11/05/2002 12:07 PM A potential buffer overflow security vulnerability has been discovered
in the iSQL*Plus component of Oracle9i Database. Oracle has issued a
severity level of 2 for this vulnerability.
