Microsoft Active Directory-MIT Kerberos Null Pointer Dereference (MS10-014; CVE-2010-0035)

The Kerberos protocol is used to mutually authenticate users and services on an open and unsecured network. It allows services to correctly identify the user of a Kerberos ticket without having to authenticate the user at the service. It does this by using shared secret keys. A denial of service...

CVE-2008-0035

CVE-2008-0035 affects Foundation used in Apple iPhone 1.0–1.1.2, iPod touch 1.1–1.1.2, and Mac OS X 10.5–10.5.1. Description: remote attacker can trigger memory corruption via a crafted URL in Safari, leading to denial of service or arbitrary code execution. Affected component: Safari/Foundation ...

CVE-2007-0035

Word or Word Viewer in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability."...

CVE-2007-0035

CVE-2007-0035 is the Word Array Overflow vulnerability in Microsoft Word/Word Viewer across Office 2000 SP3, XP SP3, 2003 SP2, Word 2004 for Mac, and Works Suite 2004–2006. The issue arises from improper handling of data in a certain array, enabling user-assisted remote code execution when a craf...

Microsoft Security Bulletin MS07-024 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232)

Microsoft Security Bulletin MS07-024 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution 934232 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Word Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

CVE-2006-0170

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-0035. Reason: This candidate is a duplicate of CVE-2006-0035. Notes: All CVE users should reference CVE-2006-0035 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-0035

The CVE-2006-0035 entry is supported by connected documents detailing a vulnerability in the Linux kernel (versions 2.6.14 and 2.6.15). The issue occurs in the netlink_rcv_skb function within af_netlink.c, where a crafted nlmsg_len field of 0 can cause a local-user-triggered denial of service via...

CVE-2006-0170

CVE-2006-0170 is rejected/not used; reference CVE-2006-0035.

CVE-2005-0035

The CVE-2005-0035 entry concerns the Acrobat/Acrobat Reader ActiveX web control used with Internet Explorer (versions 7.0 and earlier). The vulnerability allows a remote attacker to determine the existence of local files via the LoadFile method, effectively an information-disclosure weakness in t...

CVE-2004-0035

CVE-2004-0035 affects Phorum 3.4.5 and earlier, where register.php is vulnerable to SQL injection via the hide_email parameter. The underlying issue is an improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL commands. The provided documents do not specify a...

CVE-2004-0035

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hideemail parameter...

CVE-2004-0035

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hideemail parameter...

CVE-2003-0035

Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument...

CVE-2003-0035

Buffer overflow in escputil, as included in the printer-drivers package in Mandrake Linux, allows local users to execute arbitrary code via a long printer-name command line argument...

CVE-2003-0035

CVE-2003-0035 is a local vulnerability in Mandrake Linux’s printer-drivers package, specifically a buffer overflow in the escputil utility when parsing the --printer-name argument. The issue arises when escputil is installed with elevated privileges (setuid/sgid), enabling a local user to execute...

CVE-2001-0035

CVE-2001-0035 concerns a buffer overflow in the kdc_reply_cipher function of KTH Kerberos IV. The vulnerability arises from processing a long authentication request, which can cause a denial of service and potentially allow arbitrary code execution. Documents confirm the affected component is KTH...

CVE-2001-0035

Buffer overflow in the kdcreplycipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request...

CVE-2000-0035

resend command in Majordomo allows local users to gain privileges via shell metacharacters...

CVE-2000-0035

CVE-2000-0035 : The vulnerability involves Majordomo’s resend command that allows local users to gain privileges via shell metacharacters. This is a local-privilege issue with the root cause being unsafely handled shell metacharacters in the resend logic. The NVD entry lists a CVSSv2 base score o...

CVE-1999-0035

CVE-1999-0035 concerns a race condition in the signal handling routine of ftpd, as reported across multiple feeds. The primary concrete detail is that the vulnerability affects ftpd and permits read/write of arbitrary files due to a race condition in its signal handling. The Red Hat and other ent...