CVE-2004-1271

The CVE-2004-1271 issue affects dxfscope 0.2 and is caused by a buffer overflow in the dxfin function in d.c. A crafted DXF file can lead to remote code execution. The connected documents do not provide remediation steps or explicit exploitation status; no MITRE/ATT&CK details are stated. Exploit...

CVE-2004-1293

CVE-2004-1293 describes a buffer overflow in the ReadFontTbl function of reader.c in rtf2latex2e 1.0fc2. This vulnerability allows remote attackers to execute arbitrary code via a crafted RTF file. The available connected sources consistently reference the same issue across multiple feeds (NVD, S...

CVE-2004-1309

CVE-2004-1309 describes a heap-based buffer overflow in the BMP demuxer of MPlayer (Unix, version around 1.0pre5) specifically in the function demux_open_bmp within demux_bmp.c . The vulnerability can be triggered by a BMP file with a large biClrUsed field, potentially allowing a remote attacker ...

CVE-2004-1255

CVE-2004-1255 involves a buffer overflow in the expandtabs function in 2fax 3.04, enabling remote code execution via a text file converted to TIFF. The vulnerability affects 2fax 3.04 and is exploitable over the network with low attack complexity and no authentication required, potentially yieldi...

CVE-2004-1125

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...

CVE-2004-1288

The CVE-2004-1288 issue affects o3read 0.0.3, where the parse_html function in o3read.c copies an unbounded number of bytes into a 1024-byte t[] array. This buffer overflow can allow remote attackers to execute arbitrary code via a crafted SXW file. The vulnerability is documented in Gentoo GLSA ...

CVE-2004-1125

CVE-2004-1125 describes a buffer overflow in the Gfx::doImage function of Xpdf (xpdf/Gfx.cc) that also affects teTeX, kdegraphics (kpdf), and related code shared with xpdf. A crafted PDF can overflow the maskColors boundary, enabling denial of service or potentially arbitrary code execution on vu...

CVE-2004-1282

CVE-2004-1282 affects Linpopup (LinPopUp) 1.2.0 and is caused by a buffer overflow in string.c during reply handling, allowing remote code execution. Public sources confirm Linpopup vulnerability and provide fixed packages: Debian DSA-632-1 states the fix in linpopup 1.2.0-2woody1 (woody) and 1.2...

CVE-2004-1280

The guipopupviewfly function in guitviewpopup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2004-1304

Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file...

CVE-2004-1267

Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code via a crafted HPGL file...

CVE-2004-1019

The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow"...

CVE-2004-1266

CVE-2004-1266 describes a buffer overflow in the function get_field_headers within csv2xml.cpp of csv2xml 0.5.1, enabling a remote attacker to execute arbitrary code via a crafted CSV file. The affected component is the csv2xml parser; root cause is a buffer overflow in field header handling. The...

CVE-2004-1272

Buffer overflow in the saveembeddedaddress function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers to execute arbitrary code via a crafted email message...

CVE-2004-0946

rquotad in nfs-utils rquotaserver.c before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request...

CVE-2004-1263

The CVE-2004-1263 issue affects ChangePassword 0.8. When installed setuid, local users can cause arbitrary code execution by manipulating the PATH to reference a malicious make program. The vulnerability stems from overriding PATH, allowing a locally executed, attacker-provided make to run with e...

CVE-2004-1274

The CVE-2004-1274 entry concerns greed 0.81p. The vulnerability is tied to the DownloadLoop function in main.c, which can be triggered by processing a GRX file that contains a filename with shell metacharacters. The underlying issue is a buffer/command handling flaw: DownloadLoop uses strcat to c...

CVE-2004-1154

Samba vulnerability CVE-2004-1154 affects Samba 2.x and 3.0.x up to 3.0.9. The issue is a heap-based buffer overflow triggered by a Samba request carrying a very large number of security descriptors, leading to remote authentication and potentially code execution via an overflow, with denial of s...

CVE-2004-1311

Integer overflow in the realsetupandgetheader function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based...

CVE-2004-1187

Heap-based buffer overflow in the pnmgetchunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNATAG values, a different vulnerability than CVE-2004-1188...