CVE-2004-1056

CVE-2004-1056 involves the Direct Rendering Manager (DRM) drivers in Linux kernel 2.6. It is caused by insufficient DMA lock checking, which could allow an authorized client to send arbitrary values to the video card, potentially causing an X server crash or modifying the video output. The vulner...

CVE-2004-1256

CVE-2004-1256 affects abc2midi (version 2004.12.04) with multiple buffer overflows in the event_text and event_specific functions. The vulnerability allows remote attackers to execute arbitrary code via crafted ABC files. This CVE entry is supported by multiple sources in the Connected documents,...

CVE-2004-1264

CVE-2004-1264 refers to a buffer overflow in the chbg tool (Debian package) triggered by a maliciously crafted configuration/scenario file, potentially allowing arbitrary code execution on the victim’s machine. The issue is fixed in Debian DSA-644-1 with updates: 1.5-1woody1 (stable Woody) and 1....

CVE-2004-1265

Buffer overflow in the readObjectChunk function in 3dsimp.cpp for the convex-tool program in Convex 3D 0.8pre1 allows remote attackers to execute arbitrary code via a crafted 3DS file...

CVE-2004-1287

Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194...

CVE-2004-1284

CVE-2004-1284 describes a buffer overflow in mpg123 0.59r’s find_next_file() inside playlist.c that lets a remote attacker execute arbitrary code via a crafted MP3 playlist. The issue is confirmed across several databases (NVD, SUSE, FreeBSD/OpenVAS/Nessus plugins, OSV) with CVSSv2 base score 10....

CVE-2004-1276

IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP...

CVE-2004-1154

Integer overflow in the Samba daemon smbd in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer...

CVE-2004-1257

CVE-2004-1257 affects abc2mtex 1.6.1. A stack overflow vulnerability is caused by an unsafe strcpy in abc.c:241, allowing an attacker to overwrite the return address from openIn via a long input filename. Exploit evidence exists (Exploit-DB/PacketStorm) demonstrating command-line stack overflow w...

CVE-2004-1276

IglooFTP 0.6.1 is affected by a local vulnerability when recursively uploading a directory: a race condition allows local users to overwrite the files being uploaded by creating temporary files with names generated by tmpnam before the destination files are opened. This is caused by the use of tm...

CVE-2004-1152

CVE-2004-1152 : A buffer overflow in the mailListIsPdf function of Adobe Acrobat Reader 5.09 for UNIX allows remote code execution via a crafted PDF in an email attachment. The issue arises from unsafe string handling (strcat) into a fixed buffer while analyzing email messages, enabling arbitrary...

CVE-2004-1294

The CVE-2004-1294 issue affects tnftp (2003-08-25 build) where the mget function in cmds.c does not validate server-supplied filenames containing /, allowing a remote FTP server to overwrite arbitrary files on the client system. This could occur when processing responses that include such filenam...

CVE-2004-1258

This CVE-2004-1258 entry concerns abcm2ps 3.7.20. A buffer overflow in the put_words function (subs.c) permits remote attackers to execute arbitrary code via crafted ABC files. The issue is notable for its potential for arbitrary code execution with network-based access and no required authentica...

CVE-2004-1149

The CVE-2004-1149 issue concerns Computer Associates eTrust EZ Antivirus versions 7.0.0–7.0.4 (including 7.0.1.4). The root cause is insecure default file permissions (ACLs) applied during installation, allowing a local user to modify installed files and replace a program (notably VetMsg.exe) to ...

CVE-2004-1278

CVE-2004-1278 is a concrete vulnerability in jcabc2ps (20040902) where a buffer overflow in the function switch_voice in parse.c can allow remote attackers to execute arbitrary code. The available sources attribute this to crafted ABC files that trigger the overflow, implying remote code executio...

CVE-2004-1058

Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline...

CVE-2004-1314

Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability, a different...

CVE-2004-1284

Buffer overflow in the findnextfile function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist...

CVE-2004-1266

Buffer overflow in the getfieldheaders function in csv2xml.cpp for csv2xml 0.5.1 allows remote attackers to execute arbitrary code via a crafted CSV file...

CVE-2004-1310

CVE-2004-1310 describes a stack-based buffer overflow in MPlayer 1.0pre5’s asf_mmst_streaming.c functionality. A malformed large MMST stream packet can overflow a stack buffer, allowing remote attackers to potentially execute arbitrary code. The vulnerability is tied to MPlayer’s MMST streaming c...