CVE-2004-1302

CVE-2004-1302 affects YAMT 0.5. The id3tag_sort function in id3tag.c does not sanitize the Artist tag in an MP3 file, allowing a remote attacker to execute arbitrary commands via the mv call. Impact is arbitrary command execution with the user’s privileges. No remediation details are provided in ...

CVE-2004-1272

CVE-2004-1272 affects elm/bolthole filter 2.6.1; a buffer overflow in save_embedded_address (filter.c) enables remote code execution via a crafted email message. Affected component: filter.c within elm/bolthole filter 2.6.1. Impact: arbitrary code execution with network access. No remediation det...

CVE-2004-1260

CVE-2004-1260 affects abctab2ps 1.6.3. The issue arises from multiple buffer overflows in the write_heading function (subs.cpp) and the trim_title function (parse.cpp), enabling remote attackers to execute arbitrary code via crafted ABC files. The connected documents confirm the affected componen...

CVE-2004-1028

CVE-2004-1028 describes a local privilege-escalation in IBM AIX chcod. The setuid root chcod on AIX 5.1.0/5.2.0/5.3.0 trusts PATH and invokes an external program named “grep.” If a local attacker can place a malicious grep in a directory in PATH and run chcod, arbitrary code could be executed wit...

CVE-2004-1260

Multiple buffer overflows in the 1 writeheading function in subs.cpp or 2 trimtitle function in parse.cpp for abctab2ps 1.6.3 allow remote attackers to execute arbitrary code via crafted ABC files...

CVE-2004-1313

The Smc.exe process in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before invoking help, which allows local users to gain privileges...

CVE-2004-1279

Buffer overflow in the getfileliststdin function in jpegtoavi 1.5 allows remote attackers to execute arbitrary code via a crafted set of JPEG files and filenames...

CVE-2004-1261

CVE-2004-1261 affects asp2php 0.76.23, where multiple buffer overflows in the preparse function allow remote attackers to execute arbitrary code via crafted ASP scripts. The core issue is the preparse routine vulnerable to overflow conditions. The provided documents do not specify a fixed version...

CVE-2004-1267

The CVE-2004-1267 issue is a buffer overflow in the ParseCommand function of hpgl-input.c inside hpgltops for CUPS 1.1.22, enabling remote code execution via a crafted HPGL file. Connected advisories in multiple OS families confirm the vulnerability and link it to CUPS components across environme...

CVE-2004-1297

CVE-2004-1297 affects unrtf 0.19.3, where a buffer overflow in the process_font_table function (convert.c) can be triggered by a crafted RTF file. This leads to remote arbitrary code execution, as described in multiple sources. The OpenVAS and OSV entries corroborate the same vulnerability patter...

CVE-2004-1283

CVE-2004-1283 affects Mesh Viewer 0.2.2. A buffer overflow in Mesh::type in mesh.c allows remote attackers to execute arbitrary code via crafted mesh files. Exploit specifics are not provided in the connected documents; no remediation or patch details are included here. The NVD entry lists a high...

CVE-2004-1298

CVE-2004-1298 describes a buffer overflow in the parse function of vb2c.c for vb2c 0.02, enabling remote attackers to execute arbitrary code via a crafted FRM file. Affected component: vb2c (version 0.02); root cause: buffer overflow in parsing FRM inputs. Documented impact: remote code execution...

CVE-2004-1286

NapShare 1.2 is affected by a buffer overflow in the auto_filter_extern function of auto.c when the extern filter is enabled. This vulnerability could allow remote attackers to execute arbitrary code via a crafted gnutella response. The sources (NVD/CVE records) confirm the affected component and...

CVE-2004-1308

CVE-2004-1308 is a heap-based buffer overflow in the LibTIFF code paths tif_dirread.c and tif_fax3.c affecting LibTIFF 3.5.7 and 3.7.0, exploitable via a TIFF file with a -1 directory entry count. Multiple connected advisories (e.g., Ubuntu USN-46-1, Red Hat/CentOS RHSA-2005:021) describe potenti...

CVE-2004-1303

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses...

CVE-2004-1065

Buffer overflow in the exifreaddata function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file...

CVE-2004-1285

Buffer overflow in the getheader function in asfmmststreaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream...

CVE-2004-1293

Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a crafted RTF file...

CVE-2004-0946

rquotad in nfs-utils rquotaserver.c before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request...

CVE-2004-1280

CVE-2004-1280 affects junkie 0.3.1. The vulnerable code is gui_popup_view_fly in gui_tview_popup.c, which allows remote FTP servers to execute arbitrary commands via shell metacharacters in a filename, enabling command execution on the host. The documents do not provide a remediation or patch det...