Lucene search
+L

130 matches found

NVD
NVD
added 2004/06/01 4:00 a.m.20 views

CVE-2003-0907

Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe...

5.1CVSS7.5AI score0.21852EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2004/04/16 4:00 a.m.25 views

CVE-2003-0907

Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe...

7.8AI score0.21852EPSS
SaveExploits0References11
CVE
CVE
added 2004/04/16 4:00 a.m.78 views

CVE-2003-0907

The CVE-2003-0907 issue is a remote-code-execution vulnerability in Windows XP SP1 Help and Support Center (HSC) caused by improper validation of hcp:// URLs. An attacker could lure a user to visit a malicious site or open a malicious email to execute arbitrary code in the user’s context (often i...

5.1CVSS7.8AI score0.21852EPSS
SaveExploits0References11Affected Software2
NVD
NVD
added 2002/10/04 4:00 a.m.15 views

CVE-2002-0907

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-"...

7.5CVSS7.5AI score0.05634EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2002/08/31 4:00 a.m.21 views

CVE-2002-0907

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-"...

7.5AI score0.05634EPSS
SaveExploits2References3
CVE
CVE
added 2002/08/31 4:00 a.m.46 views

CVE-2002-0907

CVE-2002-0907 affects SHOUTcast servers (notably 1.8.9 and other versions prior to 1.8.12). The issue is a buffer overflow triggered by a long value in a header starting with icy-, allowing a remote authenticated DJ to execute arbitrary code on the server. The available data do not describe explo...

7.5CVSS7.9AI score0.05634EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2001/10/18 4:00 a.m.27 views

CVE-2001-0907

Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link...

2.1CVSS6.1AI score0.00789EPSS
SaveExploits1References10
NVD
NVD
added 2000/12/19 5:00 a.m.19 views

CVE-2000-0907

EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands...

7.5CVSS7.7AI score0.0201EPSS
SaveExploits1References1
CVE
CVE
added 2000/11/29 5:00 a.m.62 views

CVE-2000-0907

CVE-2000-0907 affects EServ 2.92 Build 2982. Remote attackers can exploit long HELO and MAIL FROM commands to cause a denial of service and possibly execute arbitrary commands. The CVSS v2 base score is 7.5 (HIGH), with network access and low attack complexity. The description explicitly states t...

7.5CVSS8.1AI score0.0201EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2000/01/04 5:00 a.m.60 views

CVE-1999-0907

CVE-1999-0907 affects the sccw component. Available connected documents confirm that local users can read arbitrary files, indicating a local access/readability vulnerability stemming from sccw. The root cause is not explicitly detailed in the provided sources beyond the access to arbitrary files...

2.1CVSS6.7AI score0.00377EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder