CVE-2007-4990

CVE-2007-4990 affects X.Org X Font Server (xfs) prior to 1.0.5. The vulnerability arises from the swap_char2b routine, where crafted size values in QueryXBitmaps/QueryXExtents heap-allocate data lead to heap corruption and potential arbitrary code execution. Connected advisories (e.g., RHSA/ELSA/...

CVE-2007-5226

The CVE-2007-5226 issue affects dircproxy (irc_proxy) up to version 1.2.0. The vulnerability is a NULL pointer dereference triggered by processing an ACTION command without a parameter, leading to a denial of service (segmentation fault). Demonstrations reference sending a blank /me message from ...

CVE-2007-4568

CVE-2007-4568 affects X.Org X Font Server (xfs) up to version 1.0.4; the vulnerability is a heap-based overflow triggered by heap- and stack-unsafe handling of crafted size values in the build_range function, via the QueryXBitmaps and QueryXExtents protocol requests. Root cause is an integer over...

CVE-2007-5224

inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exifprog parameter, which is specified in an exec function call...

Microsoft Visual Basic VBP file buffer overflow

Added: 10/05/2007 CVE: CVE-2007-4776 BID: 25629 OSVDB: 36936 Background Microsoft Visual Basic is a development tool for building Windows applications. Problem A buffer overflow vulnerability in Microsoft Visual Basic allows command execution when a user opens a specially crafted Visual Basic...

Unfixed XSS vulnerability at sjl.funnyordie.com

Security researcher 142TeeTH, has submitted on 10/05/2007 a cross-site-scripting XSS vulnerability affecting sjl.funnyordie.com, which at the time of submission ranked 6573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. It is...

CVE-2007-5225

CVE-2007-5225 is a Solaris local-privilege/ memory-leak issue caused by an integer signedness error in fifofs (FIFO filesystems) that allows a local user to read unspecified memory via a negative value to the I_PEEK ioctl on Solaris 8–10. For Solaris 10, patches exist: 127738-01 for x86 and 12773...

CVE-2007-5218

CVE-2007-5218 describes a cross-site scripting (XSS) vulnerability in the PHP-based “DRBGuestbook” software, specifically in index.php of version 1.1.13 by Don Barnes. The issue allows remote attackers to inject arbitrary web script or HTML via the action parameter. The provided documents do not ...

DSA-1384-1 xen-3.0

Bulletin has no description...

Sun Java JRE / Web Start Multiple Vulnerabilities (103072, 103073, 103078, 103079, 103112)

According to its version number, the Sun Java Runtime Environment JRE and/or Web Start installed on the remote host reportedly is affected by several issues that could be abused to move / copy local files, read or write local files, circumvent network access restrictions, or elevate privileges...

Mercury Mail SMTP AUTH CRAM-MD5 buffer overflow

Added: 10/05/2007 CVE: CVE-2007-4440 BID: 25357 OSVDB: 39669 Background Mercury Mail Transport System is an e-mail server product for Windows and NetWare. Problem A buffer overflow vulnerability in the SMTP service allows remote attackers to execute arbitrary commands by sending a specially craft...

CVE-2007-5078

The CVE-2007-5078 entry describes multiple cross-site scripting (XSS) vulnerabilities in eGov Manager, allowing remote attackers to inject arbitrary web script or HTML via unspecified user-supplied input to center.exe or Index.exe. The provided documents list the affected product (eGov Manager) a...

Mercury Mail SMTP AUTH CRAM-MD5 buffer overflow

Added: 10/05/2007 CVE: CVE-2007-4440 BID: 25357 OSVDB: 39669 Background Mercury Mail Transport System is an e-mail server product for Windows and NetWare. Problem A buffer overflow vulnerability in the SMTP service allows remote attackers to execute arbitrary commands by sending a specially craft...

CVE-2007-5220

The CVE-2007-5220 entry concerns an SQL injection vulnerability in catalog.asp of the ASP Product Catalog. The affected component is the catalog.asp endpoint, with the cid parameter (and possibly other parameters) as the injection vector. The underlying issue allows remote attackers to execute ar...

Sun Java JRE vulnerable to unauthorized network access

Overview The Sun Java Runtime Environment JRE contains a vulnerability that may allow unintended access to network resources. Description The Sun Java Runtime Environment JRE allows users to run Java applications in a browser or as standalone programs. Sun has made the JRE available for multiple...

CVE-2007-5224

The CVE-2007-5224 entry affects Original Photo Gallery 0.11.2 and earlier. Affected file: inc/exif.inc.php; the exif_prog parameter is used inside an exec() call without proper sanitization, allowing remote attackers to execute arbitrary commands on the server. This is described in multiple sourc...

Microsoft Visual Basic VBP file buffer overflow

Added: 10/05/2007 CVE: CVE-2007-4776 BID: 25629 OSVDB: 36936 Background Microsoft Visual Basic is a development tool for building Windows applications. Problem A buffer overflow vulnerability in Microsoft Visual Basic allows command execution when a user opens a specially crafted Visual Basic...

CVE-2007-5221

CVE-2007-5221 affects Poppawid 2.7, where PHP remote file inclusion is possible via a URL supplied to the form parameter in mail/childwindow.inc.php, allowing remote code execution by an attacker. The vulnerability is documented in multiple sources (e.g., NVD, CVE lists). Affected component is a ...

cart32-download.txt

======================================================================== = Cart32 Arbitrary File Download Vulnerability = = Vendor Website: = http://www.cart32.com = = Affected Version: = -- All releases prior to and including v6.3 = = Public disclosure on Thursday 4th October 2007 =...

CVE-2007-4673

Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045...