8092 matches found
CVE-2004-1220
Battlefield 1942 (1.6.19 and earlier) and Battlefield Vietnam (1.2 and earlier) are affected. A remote master server can cause a denial of service (client crash) by replying with a large numplayers value, which triggers a null dereference on the client. This describes the vulnerability and impact...
CVE-2004-1215
Kreed 1.05 and earlier allows remote attackers to cause a denial of service server disconnect via a long UDP packet, which causes a "message too long" socket error...
CVE-2004-1205
CVE-2004-1205 affects pnTresMailer 6.03, via codebrowserpntm.php and an invalid filetohighlight parameter that causes an error message to disclose the full file path. This is an information-disclosure vulnerability that can enable an attacker to learn sensitive path details. Public sources (NVD/N...
CVE-2004-1199
CVE-2004-1199 affects Safari 1.2.4 on Mac OS X 10.3.6. The vulnerability allows a remote attacker to trigger a denial-of-service (application crash due to memory exhaustion) by sending JavaScript that repeatedly creates nested arrays and then sorts them. This summary is supported by multiple sour...
CVE-2004-0900
CVE-2004-0900 pertains to the Windows NT 4.0 DHCP Server, where an unchecked buffer during DHCP message length validation can be exploited by a remote attacker to execute arbitrary code via a malformed DHCP message. The vulnerability is part of MS04-042 (DHCP vulnerabilities) and affects Windows ...
CVE-2004-1221
The CVE-2004-1221 vulnerability affects WebLibs 1.0, specifically the weblibs.pl component. A directory traversal flaw allows remote attackers to read arbitrary files by manipulating the TextFile parameter with .. sequences. The NVD entry describes a read-access impact with CVSS v2 base score 5.0...
CVE-2004-0900
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."...
CVE-2004-1145
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier 1 allow access to restricted Java classes via JavaScript and 2 do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary file...
CVE-2004-1321
The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote attackers to gain unauthorized access...
CVE-2004-1334
Integer overflow in the ipoptionsget function in the Linux kernel before 2.6.10 allows local users to cause a denial of service kernel crash via a cmsglen that contains a -1, which leads to a buffer overflow...
CVE-2004-1200
Firefox and Mozilla allow remote attackers to cause a denial of service application crash from memory consumption, as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays...
CVE-2004-1025
CVE-2004-1025 concerns multiple heap-based buffer overflows in imlib 1.9.14 and earlier, a library used by gkrellm and several window managers. The vulnerability allows remote attackers to crash the application and, per the description, to execute arbitrary code via crafted image files, effective...
CVE-2004-1228
The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default...
CVE-2004-1195
Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service application crash via a join request that contains a memory address that causes the server to read arbitrary memory...
CVE-2004-1219
paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator's password hash and conduct brute force password guessing attacks by listing the contents of the sessions directory and reading the associated file for the...
CVE-2004-1147
Affected software: phpMyAdmin 2.6.0-pl2 and earlier versions before 2.6.1. Vulnerable condition: external MIME-based transformations enabled. Root cause: input containing shell metacharacters leads to remote command execution. Impact: allows remote attackers to execute arbitrary commands on the s...
CVE-2004-1193
Prevx Home 1.0 contains a local privilege escalation where administrators can bypass intrusion prevention by writing to \device\physicalmemory, which restores the running kernel’s original SDT ServiceTable. The vulnerability is triggered by direct memory access to the device memory, enabling esca...
CVE-2004-1200
CVE-2004-1200 affects Firefox and Mozilla browsers. The vulnerability allows remote attackers to trigger high memory usage via JavaScript that repeatedly creates and sorts nested arrays, causing an application crash (DoS). The NVD entry documents a network-exposed scenario with a partial availabi...
CVE-2004-1198
The provided documents describe CVE-2004-1198 as a vulnerability in Microsoft Internet Explorer that allows remote attackers to cause a denial of service via memory consumption. Specifically, a demo uses JavaScript that repeatedly creates nested arrays and then sorts them, leading to an applicati...