CVE-2003-0959

Multiple integer overflows in the 32bit emulation for AMD64 architectures in Linux 2.4 kernel before 2.4.21 allows attackers to cause a denial of service or gain root privileges via unspecified vectors that trigger copyfromuser function calls with improper length arguments...

CVE-2003-0959

CVE-2003-0959 affects the 32‑bit emulation on AMD64 in Linux 2.4 kernels prior to 2.4.21, introducing multiple integer overflows in copy_from_user that can cause denial of service or allow root privileges. Affected software is the Linux 2.4 kernel (AMD64 32‑bit emulation); root access is possible...

CVE-2006-0935

Microsoft Word 2003 allows remote attackers to cause a denial of service application crash via a crafted file, as demonstrated by 101filefuzz...

Code injection

Microsoft Word 2003 allows remote attackers to cause a denial of service application crash via a crafted file, as demonstrated by 101filefuzz...

CVE-2006-0935

Microsoft Word 2003 is reported vulnerable to a denial of service via a crafted file (as demonstrated by 101_filefuzz). The vulnerability allows remote attackers to crash the application, implying partial availability impact. The available documents identify Word 2003 as affected and describe the...

CVE-2006-0935

Microsoft Word 2003 allows remote attackers to cause a denial of service application crash via a crafted file, as demonstrated by 101filefuzz...

CVE-2003-1295

CVE-2003-1295 concerns xscreensaver version 4.12 (and possibly others) with an unspecified vulnerability that can cause the process to crash when verifying the user password. The connected records reiterate the same non-detailed flaw and do not provide concrete root-cause analysis, exploit steps,...

CVE-2003-0885

CVE-2003-0885 concerns Xscreensaver 4.14, where leftover debugging code causes insecure temporary file creation in the (1) apple2, (2) xanalogtv, and (3) pong screensavers. The described flaw enables local users to overwrite arbitrary files via a symlink attack, representing a local file-overwrit...

CVE-2003-1294

CVE-2003-1294 affects XScreenSaver prior to 4.15, where temporary files are created insecurely in multiple components (driver/passwd-kerberos.c, driver/xscreensaver-getimage-video, driver/xscreensaver.kss.in, vidwhacker, webcollage). This enables a local attacker to overwrite arbitrary files via ...

Kerio Personal Firewall <= 2.1.4 Remote Authentication Packet Overflow

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Kerio Personal Firewall 2.1.4 - Remote Authentication Packet Overflow (Metasploit)

Kerio Personal Firewall 2.1.4 - Remote Authentication Packet Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same licens...

CVE-2003-0249

The CVE-2003-0249 issue involves PHP treating unknown HTTP methods (e.g., PoSt) as GET requests, potentially bypassing access restrictions when PHP runs on servers that pass all methods (notably with Apache httpd 2.0 and Limit directives). Affected software is PHP in combination with Apache httpd...

CVE-2003-0986

CVE-2003-0986 affects PPC64 on Linux kernels: 2.6 before 2.6.2 and 2.4 before 2.4.24. The issue arises when code copies data from userspace to kernelspace without using copy_from_user, failing to cross security boundaries and enabling local denial of service. Documents indicate a kernel fix/updat...

CVE-2003-0691

...

CVE-2003-0691

CVE-2003-0691 entry is rejected/not used; it does not represent an active vulnerability.

wmp_plugin_ms06_006.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Internet Explorer COM object instantiation vulnerability

Added: 02/24/2006 CVE: CVE-2005-1990 BID: 14511 OSVDB: 18612 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. Problem Improper instantiation of certain COM objects as ActiveX controls by Internet...

Internet Explorer COM object instantiation vulnerability

Added: 02/24/2006 CVE: CVE-2005-1990 BID: 14511 OSVDB: 18612 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. Problem Improper instantiation of certain COM objects as ActiveX controls by Internet...

Microsoft Windows Media Player 9 - Plugin Overflow (MS06-006) (Metasploit)

Microsoft Windows Media Player 9 - Plugin Overflow MS06-006 Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the...

Microsoft Windows Media Player 9 - Plugin Overflow (MS06-006) (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...