CVE-2007-5897

Buffer overflow in Oracle Database Server (MDSYS.SDO_CS) allows remote authenticated users to crash the server and execute arbitrary code via the TRANSFORM function. Affected: Oracle 8iR3, 9iR1/2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4. Note: this CVE may be related to CVE-2007-5515, CVE-2007-550...

Sql injection

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure...

CVE-2007-5766

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure...

CVE-2007-5766

The vulnerability CVE-2007-5766 affects Oracle E-Business Suite 11/12, specifically the okxLOV.jsp page in the Administration console. The root cause is improper input handling that allows an attacker to inject arbitrary SQL in the context of the APPS user, enabling remote exploitation without au...

CVE-2007-4517

CVE-2007-4517 affects Oracle Database 10g Release 2, specifically the XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure. A buffer overflow is triggered by a long combined OWNER or NAME parameter, enabling remote authenticated attackers to execute arbitrary code. Exploitation evidence exists in multipl...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 is affected by CVE-2007-5896 where an iframe with JavaScript can trigger a denial of service by redirecting document.location to include a leading NULL byte with URIs such as res://, about:config, or file:///. The vulnerability allows remote attackers to cause CPU consumpt...

pcre security update

CentOS Errata and Security Advisory CESA-2007:0967 Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular...

CVE-2007-4223

Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel memory, which allows local users to gain privileges via unspecified vectors...

CVE-2007-3921

CVE-2007-3921 affects gforge (Debian packages gforge 3.1 and 4.5.14) where insecure handling of temporary files enables local users to truncate arbitrary files via a symlink attack. The Debian security advisory DSA-1402-1 documents the vulnerability and fixes, with updated packages for etch (4.5....

CVE-2007-4129

CVE-2007-4129 affects CoolKey 1.1.0, where a local attacker can exploit a symlink in /tmp/.pk11ipc1/ to overwrite arbitrary files. This is a local impact vulnerability with the root cause in how temporary folders are created. Public sources confirm the issue and reference vendor advisories and pa...

CVE-2007-4223

CVE-2007-4223 concerns the Microsoft Sysinternals DebugView driver Dbgv.sys. Before version 4.72, the kernel module exposes a mechanism that can copy user-supplied data into kernel memory, enabling local privilege escalation. The vulnerability requires the DebugView driver to be loaded (e.g., by ...

CVE-2007-4352

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file...

Immunity Canvas: SSREADER

Name| ssreader ---|--- CVE| CVE-2007-5892 Exploit Pack| CANVAS Description| SSReader 4.0 Stack based buffer overflow Notes| CVE Name: CVE-2007-5892 VENDOR: SSReader Repeatability: Infinite client side - no crash CVE URL: https://vulners.com/cve/CVE-2007-5892 Date public: 11/07/2007 CVSS: 10.0...

CVE-2007-5392

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow...

CVE-2007-5893

CVE-2007-5893 affects the C++ Sockets Library (HTTPSocket.cpp) prior to version 2.2.5. A crafted HTTP request with a missing protocol version number triggers an exception, allowing remote attackers to cause a denial of service (crash). No exploitation details or patch status are provided beyond t...

CVE-2007-5892

CVE-2007-5892 affects SSReader 4.0 and earlier via the pdg2.dll ActiveX control. The issue is a stack-based buffer overflow triggered by a long argument to the Register method, enabling remote code execution. Affected: SSReader 4.0 and older; root cause: unchecked/overlong input in Register into ...

CVE-2007-5889

CVE-2007-5889 describes PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha (aka Phoenix). The affected components are the admin-facing scripts (admin.php, menu_add.php, menu_operation.php) under the administrator/ path, where a URL passed to site_absolute_path can cause arbitrary PHP co...

CVE-2007-5393

CVE-2007-5393 is described in connected documents as a heap-based buffer overflow in the CCITTFaxStream::lookChar method of xpdf/Stream.cc in Xpdf 3.02p11. This vulnerability can be triggered by a crafted CCITTFaxDecode filter in a PDF, allowing remote attackers to execute arbitrary code. The Mir...

CVE-2007-5581

Summary: CVE-2007-5581 affects Cisco Unified MeetingPlace (mpweb/scripts/mpx.dll). The vulnerability is a cross-site scripting flaw caused by insufficient validation of the FirstName and LastName parameters, allowing remote attackers to inject script/HTML into a user’s browser session in MeetingP...

CVE-2007-5392

CVE-2007-5392 is a concrete vulnerability described in the connected document: Xpdf 3.02 (with xpdf-3.02pl1.patch) has an integer overflow in DCTStream::reset that can be exploited remotely by a crafted PDF to cause a heap-based buffer overflow and arbitrary code execution. The MiracleLinux Nessu...