Mandrake Linux

Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable.

Published: 2007-09-18T19:00:00.000Z
Updated: 2024-08-07T14:46:38.696Z

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.

Published: 2007-04-06T01:00:00.000Z
Updated: 2024-08-07T12:50:35.267Z

The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.

Published: 2005-01-20T05:00:00.000Z
Updated: 2024-08-07T20:57:40.741Z

passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.

Published: 2005-08-17T04:00:00.000Z
Updated: 2024-08-08T01:22:13.939Z

Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.

Published: 2005-08-17T04:00:00.000Z
Updated: 2024-08-08T01:22:13.698Z