85 matches found
CVE-2009-0671
CVE-2009-0671 is rejected/not used per the description; not an active vulnerability entry.
CVE-2008-0671
Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...
DEBIAN-CVE-2008-0671
Stack-based buffer overflow in the addlinebuffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF...
CVE-2008-0671
TinTin++ 1.97.9 and WinTin++ 1.97.9 contain a stack-based buffer overflow in add_line_buffer that can be triggered by a long chat message (LF to CRLF conversion issue). This remote code execution vulnerability is publicly documented across CVE-2008-0671 entries and Gentoo GLSA-201111-07, with mul...
MS07-014 / MS07-015: Vulnerabilities in Microsoft Word and Office Could Allow Remote Code Execution (929434 / 932554) (Mac OS X)
The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Word or another Office application...
MS07-015: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554)
The remote host is running a version of Microsoft Office that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Office. C Tenable Network Security, Inc. include'compat.inc'; if descripti...
CVE-2007-0671
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks...
CVE-2007-0671
CVE-2007-0671 is a remote-code-execution vulnerability in Microsoft Office Excel (affecting Excel 2000/XP/2003 and Mac equivalents) where a specially crafted Excel file can trigger arbitrary code execution. The vulnerability arises from improper handling/parsing of office records, enabling remote...
CVE-2006-0671
Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...
CVE-2006-0671
The vulnerability CVE-2006-0671 affects Sony Ericsson mobile models K600i, V600i, W800i, and T68i. A buffer overflow in the Bluetooth L2CAP handling allows remote attackers to trigger a denial of service (reboot or shutdown) by sending a malformed L2CAP packet whose length field is shorter than t...
CVE-2005-0671
Ca3DE (Carsten’s 3D Engine) is affected: the March 2004 version and earlier contain a format string vulnerability in a command that allows remote code execution. Root cause is improper handling of format strings in the engine, enabling an attacker to supply format specifiers that are interpreted ...
CVE-2004-0671
CVE-2004-0671 affects Brightmail Spamfilter 6.0 and earlier beta releases. The vulnerability arises in the web interface via the viewMsgDetails.do request where an attacker can modify the id parameter to read mail belonging to other users. This is a remote, unauthenticated issue with potential ex...
CVE-2004-0671
Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgDetails.do request...
CVE-2003-0671
Format string vulnerability in tcpflow, when used in a setuid context, allows local users to execute arbitrary code via the device name argument, as demonstrated in Sustworks IPNetSentryX and IPNetMonitorX the setuid program RunTCPFlow...
CVE-2003-0671
CVE-2003-0671 affects tcpflow and is described as a format string vulnerability that, when tcpflow runs in a setuid context (notably the RunTCPFlow program used by Sustworks IPNetSentryX and IPNetMonitorX), allows local users to execute arbitrary code via the device name argument. The available d...
CVE-2002-0671
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing...
CVE-2002-0671
CVE-2002-0671 affects Pingtel xpressa SIP-based VoIP phones, versions 1.2.5–1.2.7.4. The issue arises when the device downloads applications from a web site without verifying their integrity, enabling remote attackers to install Trojan horse applications via DNS spoofing. The vulnerability is doc...
CVE-2002-0671
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing...