CVE-2004-0431

CVE-2004-0431 concerns Apple QuickTime (QuickTime.qts) before 6.5.1. The vulnerability is an integer overflow in the Sample-to-Chunk table handling that can overflow a heap and enable arbitrary code execution when a user opens a malicious QuickTime file. Affected component is QuickTime.qts in Qui...

CVE-2004-0437

CVE-2004-0437 affects Titan FTP Server (version 3.01 build 163; possibly earlier versions before build 169). Affected component: FTP server handling of LIST -L. Root cause: remote authenticated users can cause a crash by disconnecting during LIST -L, leading Titan to access an invalid socket. Imp...

CVE-2004-0422

CVE-2004-0422 concerns the flim Emacs library, where temporary files are created insecurely (before 1.14.3), allowing a local user to overwrite arbitrary files via a symlink attack. Public advisories document that this could enable local privilege impact, with a CVSS v2 base score of 2.1 (LOW). R...

CVE-2004-0437

Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service crash by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket...

CVE-2004-0422

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...

CVE-2004-0431

Integer overflow in Apple QuickTime QuickTime.qts before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow...

CVE-2004-2003

Buffer overflow in the sslprcert function in the SSLway filter sslway.c for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via a certificate with a long 1 subject or 2 issuer name field...

CVE-2004-0425

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie...

CVE-2004-0394

A "potential" buffer overflow exists in the panic function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic...

CVE-2004-0226

Multiple buffer overflows in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2004-0229

The framebuffer driver in Linux kernel 2.6.x does not properly use the fbcopycmap function, with unknown impact...

CVE-2004-0234

CVE-2004-0234: LHA 1.14 contains multiple stack-based buffer overflows in get_header() of header.c, allowing remote attackers or local users to execute arbitrary code via long directory/file names in an LHA archive. The issue affects LHA as used in products such as Barracuda Spam Firewall; overfl...

CVE-2004-0432

ProFTPD 1.2.9 contains a logic issue where CIDR-based ACL directives in Allow and Deny are treated as if they were AllowAll, effectively bypassing access restrictions. This vulnerability allows FTP clients to bypass intended controls and potentially access or modify files that should be restricte...

CVE-2004-2001

ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received...

CVE-2004-0425

CVE-2004-0425 describes a heap-based buffer overflow in the SiteMinder Affiliate Agent 4.x (platforms: Solaris, Windows, HP-UX) triggered by a large SMPROFILE cookie, enabling remote code execution. A vendor patch (Web Agent 4QMR6 HF-016) is available to fix cookie handling; the vulnerability is ...

CVE-2004-0421

CVE-2004-0421 is a libpng vulnerability where an out-of-bounds read can occur while copying error-message data, allowing a crash via crafted PNGs in libpng 1.0.x up to and including 1.0.15 (and earlier). The linked Nessus/OpenVAS data notes this issue as a regression referenced in later advisorie...

CVE-2004-0421

The Portable Network Graphics library libpng 1.0.15 and earlier allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message...

CVE-2004-0433

Multiple buffer overflows in the Real-Time Streaming Protocol RTSP client for 1 MPlayer before 1.0pre4 and 2 xine lib xine-lib before 1-rc4, when playing Real RTSP realrtsp streams, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long URLs, b lo...

CVE-2004-0433

CVE-2004-0433: Multiple buffer overflows in the RTSP client handling of RealRTSP streams affect MPlayer (before 1.0pre4) and xine-lib (before 1-rc4). The flaws enable denial of service (crash) and potentially arbitrary code execution via long URLs, long Real server responses, or long RDT packets....

CVE-2004-0233

CVE-2004-0233 describes a symlink vulnerability in the utempter library, where device names containing .. (dot dot) directory traversal can enable local users to overwrite arbitrary files via a symlink attack when an application trusts utmp/wtmp. Public documents from Slackware, Gentoo, Gentoo GL...