CVE-2004-0688

Multiple integer overflows in 1 the xpmParseColors function in parse.c, 2 XpmCreateImageFromXpmImage, 3 CreateXImage, 4 ParsePixels, and 5 ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file...

CVE-2004-0907

The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code...

CVE-2004-0903

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing...

CVE-2004-0787

Cross-site scripting XSS vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields...

CVE-2004-0827

CVE-2004-0827 affects ImageMagick 5.x before 5.4.4 and 6.x before 6.0.6.2, with remote denial of service and potential arbitrary code execution via malformed AVI, BMP, or DIB files. Multiple connected advisories (Ubuntu USN-35-1, Debian DSA 547-1, Red Hat RHSA-2004:480/636, etc.) corroborate buff...

CVE-2004-0908

CVE-2004-0908 affects Mozilla Firefox (before the Preview Release), Mozilla (before 1.7.3), and Thunderbird (before 0.8). The issue allows untrusted JavaScript to read and write to the clipboard via script-generated events (e.g., Ctrl-Ins), potentially exposing sensitive information. The connecte...

CVE-2004-0868

CVE-2004-0868 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2004-0811

Technical details about CVE-2004-0811 are not publicly available in the provided connected documents. Please monitor for updates for affected products, exact vectors, impact, and remediation information.

CVE-2004-0905

CVE-2004-0905 affects Mozilla Firefox (before the Preview Release), Mozilla (before 1.7.3), and Thunderbird (before 0.8). The issue enables remote attackers to perform cross-domain scripting and potentially execute arbitrary code by convincing a user to drag and drop javascript: links to a frame ...

CVE-2004-0802

Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817...

CVE-2004-0881

Removed by vendor...

CVE-2004-0880

Removed by vendor...

CVE-2004-0873

Apple iChat AV 2.1, AV 2.0, and 1.0.1 are affected by a remote code-execution vulnerability where a crafted "link" referencing a program can cause arbitrary commands to run on the target. This is a network-type issue with low attack complexity, no authentication, and partial confidentiality/integ...

CVE-2004-0821

CVE-2004-0821 concerns the Mac OS X Core Foundation CFPlugIn facilities: the CoreFoundation CFPlugIn loader could load user-supplied libraries, potentially allowing a local attacker to gain elevated privileges. Public sources (NVD entry for CVE-2004-0821 and CERT/Apple advisories) describe the vu...

CVE-2004-0801

CVE-2004-0801 affects foomatic-rip in Foomatic prior to 3.0.2 running under CUPS; the flaw allows local users or remote attackers with access to CUPS to execute arbitrary commands. The linked SUSE/OpenVAS entries confirm this CVE and reference patches in related updates (e.g., openSUSE hplip upda...

CVE-2004-0904

Integer overflow in the bitmap BMP decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows...

CVE-2004-0161

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients...

CVE-2004-0907

CVE-2004-0907 affects Linux installs of Mozilla Firefox (pre-Preview Release), Mozilla (pre-1.7.3), and Thunderbird (pre-0.8). The root cause is insecure permissions on files created during the installation tarball extraction, which could let local users overwrite files and execute arbitrary code...

CVE-2004-0909

Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then...

CVE-2004-0802

Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817...