8091 matches found
CVE-2004-0202
IDirectPlay4 Application Programming Interface API of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service application crash via a malformed packet...
CVE-2004-0414
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service crash, modification of critical program data, or arbitrary code execution...
CVE-2004-0538
LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user...
CVE-2004-0548
CVE-2004-0548 describes multiple stack-based buffer overflows in Aspell’s word-list-compress utility (compress.c) that allow a local user to execute arbitrary code via a long wordlist entry. The overflow is triggered when using the (1) “c” compress option or (2) “d” decompress option, due to lack...
CVE-2004-0539
The CVE-2004-0539 issue affects Mac OS X Safari on 10.3.4 and 10.2.8 where the Safari “Show in Finder” button could cause downloaded files to be opened/executed, potentially enabling arbitrary code execution. CERT/OSVDB entries confirm this could allow an attacker to run arbitrary code. Apple rel...
CVE-2004-0538
CVE-2004-0538 affects LaunchServices in Mac OS X 10.3.4 and 10.2.8, where LaunchServices automatically registers and opens new applications, potentially allowing arbitrary code execution without warning. The connected sources corroborate that the issue is tied to LaunchServices and related to CAN...
CVE-2004-0547
CVE-2004-0547 : A buffer overflow in the PostgreSQL ODBC driver vulnerable before 7.2.1 allows remote attackers to crash the application, yielding a denial of service. Affected component: PostgreSQL ODBC driver. Root cause: buffer overflow in the driver. Impact: remote crash of the vulnerable hos...
CVE-2004-0416
Double free vulnerability for the errorprogname string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code...
CVE-2004-0204
CVE-2004-0204 describes a directory traversal in Crystal Reports and Crystal Enterprise Web viewers redistributed with Microsoft Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, and Microsoft Business Solutions CRM 1.2. The vulnerability arises from improper validation of HTTP...
CVE-2004-0418
CVE-2004-0418 describes an out-of-bounds write vulnerability in CVS servers caused by improper handling of empty data lines in the serve_notify path. Affected CVS versions include CVS 1.12.x (up to 1.12.8) and 1.11.x (up to 1.11.16). The issue could enable remote attackers to execute arbitrary co...
CVE-2004-0543
CVE-2004-0543 involves multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1–11.5.8 that allow a remote attacker to execute arbitrary SQL procedures and queries. The issue affects Oracle Applications 11.0 and E-Business Suite releases 11.5.1–11.5.8;...
CVE-2004-0545
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0541
CVE-2004-0541 affects Squid Web Proxy Cache (2.5.x and 3.x when built with NTLM handlers). The issue is a buffer overflow in the NTLM authenticate path, specifically in ntlm_check_auth, where a long password can overflow the local buffer and enable remote code execution. Public references show ex...
CVE-2004-0541
Buffer overflow in the ntlmcheckauth NTLM authentication function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password "pass" variable...
CVE-2004-0542
CVE-2004-0542 affects PHP on Win32: PHP versions before 4.3.7 fail to filter all shell metacharacters in escapeshellcmd/escapeshellarg, enabling local or remote attackers to execute arbitrary code, overwrite files, or access internal environment variables by using characters such as “%”, “|”, or ...
CVE-2004-0544
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the 1 putlvcb or 2 getlvcb commands...
CVE-2004-0544
The CVE-2004-0544 issue affects LVM on AIX 5.1/5.2, with multiple buffer overflows in putlvcb and getlvcb that enable local privilege escalation. Connected Nessus entries indicate vendor patches IY55681 (AIX 5.1) and IY55682 (AIX 5.2) to mitigate the vulnerability. Practically, systems running af...
CVE-2004-0527
CVE-2004-0527 affects KDE Konqueror 2.1.1 and 2.2.2. The issue allows remote attackers to spoof a legitimate URL in the status bar by using A HREF tags with modified alt values that point to the legitimate site, combined with an image map whose href points to the malicious site, enabling a phishi...
CVE-2004-0536
Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report...