191 matches found
Fedora Core 1 : gtk2-2.2.4-10 (2004-288)
During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gtk2. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by a...
CVE-2003-0753
nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphpconfigLangFile parameter...
CVE-2003-0753
CVE-2003-0753 affects nphpd.php in newsPHP 216 and earlier. The issue allows remote attackers to read arbitrary files by supplying a full pathname to the target file in the nphp_config[LangFile] parameter, exposing confidential data. The provided documents corroborate the vulnerability descriptio...
CVE-2002-0753
Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie...
CVE-2002-0753
CVE-2002-0753 : Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie. The connected documents confirm the vulnerability description but do not provide additional technical details, affected versions beyond 5.0, exploit spe...
CVE-2000-0753
CVE-2000-0753 affects the Microsoft Outlook mail client. The vulnerability involves a winmail.dat attachment containing an RTF file that reveals the physical path of the sender’s machine. Root cause: information leakage via a path in the attachment. Impact: disclosure of local machine path; no br...
CVE-2000-0753
The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format RTF files...
CVE-2001-0753
Cisco CBOS 2.3.8 and earlier stores the passwords for 1 exec and 2 enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges...
CVE-2000-0753
The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format RTF files...
CVE-1999-0753
CVE-1999-0753 affects the Mini SQL package via the w3-msql CGI script. The issue allows remote attackers to view restricted directories through the CGI, exposing partial confidentiality (per CVSS: Network, Low attack complexity, No authentication, Partial confidentiality/Integrity/Availability). ...