CVE-2008-0553

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk Tcl/Tk before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...

CVE-2007-0553

Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...

CVE-2007-0553

PHProxy (index.inc.php) is affected by multiple XSS vulnerabilities in versions before 0.5 beta 2, allowing remote attackers to inject arbitrary script/HTML via the data[realm] and _url parameters (distinct from CVE-2004-2604). The entry provides concrete vectors and references; exploitation stat...

CVE-2007-0553

Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...

Internet Explorer DHTML object vulnerability

Added: 04/25/2006 CVE: CVE-2005-0553 BID: 13120 OSVDB: 15465 Background Dynamic HTML DHTML allows the creation of interactive web pages. Problem Race conditions in various DHTML methods could allow command execution when a specially crafted web page is loaded in Internet Explorer. Resolution Appl...

CVE-2006-0553

Vulnerability summary (CVE-2006-0553): PostgreSQL 8.1.0–8.1.2 allows an authenticated user to gain elevated privileges by exploiting the error-recovery path during a crafted SET ROLE to another user. Root cause: inadequate validation while recovering from errors, enabling privilege escalation via...

CVE-2005-0553

The CVE-2005-0553 issue is a race condition in the DHTML object processor of Internet Explorer (IE) versions 5.01, 5.5, and 6 that can enable remote code execution when a user visits a crafted web page or HTML email. The root cause involves race conditions in processing of DHTML objects (e.g., Co...

CVE-2003-0553

CVE-2003-0553 describes a buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02. A remote attacker can trigger code execution by a attachment with a long filename. The vulnerability is network-exposed with low exploit complexity and no authentication, with a CVSS...

CVE-2002-0553

The CVE-2002-0553 entry describes a Cross-site scripting (XSS) vulnerability in SunShop 2.5 and earlier. According to the sources, remote attackers can inject script into fields during new customer registration to gain administrative privileges in SunShop. The NVD metrics list a CVSSv2 base score...

CVE-2000-0553

The vulnerability affects IPFilter firewall versions 3.4.3 and earlier. A race condition occurs when overlapping 'return-rst' and 'keep state' rules are configured, which can allow remote attackers to bypass access restrictions. The available documents describe the affected component and the cond...