18185 matches found
CVE-2007-6444
CVE-2007-6444 is rejected/not used and does not represent an active vulnerability entry.
CVE-2007-6437
Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service crash via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference...
CVE-2007-5849
Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...
CVE-2007-5848
Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service...
CVE-2007-5850
CVE-2007-5850 describes a heap-based buffer overflow in Desktop Services of Apple Mac OS X 10.4.11 that allows user-assisted attackers to execute arbitrary code via a directory containing a crafted .DS_Store file. The NVD entry confirms a high base score (8.8) with the impact to confidentiality a...
CVE-2007-5856
CVE-2007-5856 affects Apple Mac OS X up to version 10.5.1 in Quick Look: when previewing HTML, plug-ins can initiate network requests, potentially leaking sensitive information. The NVD entry cites a CVSSv2 base score of 9.4 (HIGH) with network attack vector and no user interaction. OpenVAS refer...
CVE-2007-4710
CVE-2007-4710 describes an unspecified vulnerability in ColorSync for Apple Mac OS X 10.4.11 that can be triggered by processing an image with a crafted ColorSync profile, leading to memory corruption and allowing either denial of service or remote code execution. The issue affects ColorSync in O...
CVE-2007-5847
CVE-2007-5847 is a race condition in the CFURLWriteDataAndPropertiesToResource API within Core Foundation on Mac OS X 10.4.11. The flaw causes created files to inherit insecure permissions, potentially allowing local users to access sensitive information. The vulnerability affects Mac OS X 10.4.1...
CVE-2007-5861
CVE-2007-5861 describes an unspecified vulnerability in Spotlight for Mac OS X 10.4.11 where a crafted .XLS file triggers memory corruption in the Microsoft Office Spotlight Importer, allowing user-assisted denial of service or arbitrary code execution. Affected: Mac OS X 10.4.11 with Spotlight i...
CVE-2007-5859
Affected software: Safari RSS in Mac OS X 10.4.11. Vulnerability: memory corruption in handling feed: URLs that may allow remote attackers to terminate the application or execute arbitrary code. The issue is documented in CVE-2007-5859 and is noted across multiple sources; exploitation involves c...
CVE-2007-6437
CVE-2007-6437 affects Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8. It allows a remote attacker to cause a crash (denial of service) via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference. The vulnerability is mitigated by u...
CVE-2007-5849
CVE-2007-5849 affects CUPS 1.2–1.3.4 with an integer underflow in the asn1_get_string function of the SNMP back end (backend/snmp.c). A crafted SNMP response can trigger a stack-based buffer overflow, enabling remote code execution. Public advisories (Mandriva MDVSA-2008:036, Ubuntu USN-563-1) do...
CVE-2007-5854
CVE-2007-5854 affects Apple Mac OS X 10.4.11 and 10.5.1 where Launch Services does not treat HTML files as unsafe content, enabling cross-site scripting (XSS) or information disclosure via a crafted HTML file. Public sources in the connected documents reference the same vulnerability and point to...
CVE-2007-5853
CVE-2007-5853 affects Apple Mac OS X 10.4.11 in the IO Storage Family. A user-assisted path via a disk image with crafted GUID partition maps can trigger memory corruption, enabling either a denial of service (system shutdown) or arbitrary code execution. The issue relates to IO Storage Family an...
CVE-2007-5851
CVE-2007-5851 affects Apple Mac OS X 10.4.11's iChat. The issue allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors. The OpenVAS/NVD entries reference Mac OS X Security Update 2007-009 as a remediation path, but the provided do...
CVE-2007-5860
CVE-2007-5860 affects Apple Mac OS X 10.5.1 (Spin Tracer). The vulnerability is described as an unspecified local condition that allows an attacker with local access to execute arbitrary code via insecure file operations on output files. This is confirmed by multiple sources in the connected set,...
CVE-2007-5858
Affected software: WebKit/Safari on Mac OS X 10.4.11 and 10.5.1, iPhone 1.0–1.1.2, and iPod touch 1.1–1.1.2. Issue: remote attackers can navigate the subframes of other pages, enabling cross-site scripting (XSS) and potential information disclosure. Root cause: the vulnerability allows subframe n...