8092 matches found
CVE-2004-1259
CVE-2004-1259 affects abcpp 1.3.0. The vulnerability arises from multiple buffer overflows in the handle_directive function in abcpp.c, allowing remote attackers to execute arbitrary code via crafted ABC files. According to NVD data, the CVSS2 base score is 10.0 (HIGH) with network access, low at...
CVE-2004-1279
The CVE-2004-1279 issue affects jpegtoavi 1.5, caused by a buffer overflow in the get_file_list_stdin function. An attacker can craft a set of JPEG files/filenames to trigger the overflow and potentially execute arbitrary code remotely. Public references confirm the vulnerability detail, but the ...
CVE-2004-1300
CVE-2004-1300 affects xine-lib (libxine) 1-rc7, where a buffer overflow in demux_aiff.c:open_aiff_file allows remote attackers to execute arbitrary code via a crafted AIFF file. Multiple sources (NVD, SUSE, Gentoo GLSA, OpenVAS/Nessus references) describe the vulnerability as a buffer overflow in...
CVE-2004-1292
CVE-2004-1292 affects ringtonetools. A buffer overflow in the parse_emelody function (parse_emelody.c) could allow a remote attacker to execute arbitrary code by presenting a crafted eMelody file. Public records identify ringtonetools 2.22 as affected; Gentoo GLSA 200503-18 advises upgrading to t...
CVE-2004-1065
CVE-2004-1065 describes a buffer overflow in PHP’s exif_read_data function, permitting remote code execution via a long section name in an image. Affected are PHP versions before 4.3.10 and PHP 5.x up to 5.0.2. The vulnerability enables an attacker to run arbitrary code on the affected server, wi...
CVE-2004-1058
CVE-2004-1058 is a race-condition vulnerability in the Linux kernel that can allow a local user to read environment variables of another process that is still spawning via /proc/.../cmdline. The initial description specifies Linux kernel 2.6 as affected. Connected advisories confirm this CVE is r...
CVE-2004-1297
Buffer overflow in the processfonttable function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file...
CVE-2004-1056
Direct Rendering Manager DRM driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service X Server crash and possibly modify the video output...
CVE-2004-1314
CVE-2004-1314 corresponds to a Safari 1.x vulnerability where an attacker can spoof arbitrary websites by injecting content from one window into a target window that resides in another domain, demonstrated via a pop-up window on a trusted site. This “window injection” issue is distinct from CVE-2...
CVE-2004-1188
The CVE-2004-1188 issue is in xine (and frontends like MPlayer) where the pnm_get_chunk function does not verify that the input chunk size is less than PREAMBLE_SIZE. This can cause a read with a negative length, leading to a buffer overflow via tags such as RMF_TAG, DATA_TAG, PROP_TAG, MDPR_TAG,...
CVE-2004-1265
The CVE-2004-1265 entry concerns Convex 3D 0.8pre1, specifically the readObjectChunk function in 3dsimp.cpp used by the convex-tool. The vulnerability is a buffer overflow that could allow remote attackers to execute arbitrary code through a crafted 3DS file. Documents confirm affected software a...
CVE-2004-1299
CVE-2004-1299 is a vulnerability in Vilistextum 2.6.6 where the get_attr function (html.c) contains a buffer overflow. This can allow a remote attacker to execute arbitrary code via a crafted webpage. The Gentoo GLSA advisory (GLSA-200501-10) attributes the issue to unsafe reads into an array and...
CVE-2004-0946
CVE-2004-0946 affects nfs-utils: the rquotad component (rquota_server.c) on 64-bit architectures performs an unsafe 32-bit assumption during memcpy, causing a stack-based buffer overflow. This could allow remote code execution via crafted NFS requests. Public advisories confirm a fix in updated n...
CVE-2004-1295
The slipdown function in slip.c for the umlnet program in uml-utilities 20030903, when umlnet is installed setuid root, does not verify whether the calling user has sufficient permission to disable an interface, which allows local users to cause a denial of service network service disabled...
CVE-2004-1019
CVE-2004-1019 affects PHP before 4.3.10 and PHP 5.x up to 5.0.2. Deserialization in unserialize() on untrusted data can lead to remote code execution, denial of service, information disclosure, and triggering results like double-free and negative reference index array underflow. Affected componen...
CVE-2004-1277
CVE-2004-1277 concerns IglooFTP 0.6.1 where the download_selection_recursive() function in ftplist.c is vulnerable. A remote FTP server can cause arbitrary files to be overwritten via filenames containing a forward slash ('/'), indicating a path traversal-like flaw within the file listing/selecti...
CVE-2004-1290
CVE-2004-1290 describes a buffer overflow in the process_moves function of pgn2web.c in pgn2web 0.3, enabling remote attackers to execute arbitrary code via a crafted PGN file. No patch/version remediation details are provided in the connected documents. The CVSS metrics indicate a high-severity,...
CVE-2004-1275
CVE-2004-1275 describes a buffer overflow in the remove_quote function of convert.c for html2hdml 1.0.3, allowing remote attackers to execute arbitrary code via a crafted HTML file. The vulnerability is evidenced in the NVD/NVD-derived records and CVE listings, with a high-severity CVSS 2.0 base ...
CVE-2004-1172
CVE-2004-1172 affects Veritas Backup Exec Agent Browser (8.x before 8.60.3878 HF68; 9.x before 9.1.4691 HF40). The issue is a stack-based buffer overflow triggered by a registration request containing a long hostname, allowing remote code execution with the service’s privileges. Public advisories...