18185 matches found
CVE-2007-5135
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...
CVE-2007-5135
The CVE-2007-5135 vulnerability is an off-by-one buffer overflow in OpenSSL SSL_get_shared_ciphers() affecting OpenSSL 0.9.7 up to 0.9.7l and 0.9.8 up to 0.9.8f. A crafted cipher-list could allow a remote attacker to trigger a one-byte underflow and potentially execute arbitrary code. Public advi...
CVE-2007-5135
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1171. Reason: This candidate is a duplicate of CVE-2007-1171. Notes: All CVE users should reference CVE-2007-1171 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-5124
The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.5.3.12 and earlier allows remote attackers to execute arbitrary code via unspecified web script or HTML in an instant message, related to AIM's filtering of "specific tags and attributes" and the lack of Local Machine Zo...
CVE-2007-5126
Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...
CVE-2007-5125
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1171. Reason: This candidate is a duplicate of CVE-2007-1171. Notes: All CVE users should reference CVE-2007-1171 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-5132
CVE-2007-5132: A race condition in the Solaris kernel (versions 8–10) allows local users to trigger a denial of service (panic) via unspecified vectors related to thread context handling. The NVD entry notes local access with low complexity and availability impact as complete, but the connected d...
CVE-2007-5131
CVE-2007-5131 affects Interspire ActiveKB NX 2.x. The vulnerability is a SQL injection in index.php when handling the browse action via the catId parameter, enabling remote execution of arbitrary SQL commands. Note that ActiveKB 1.5 is also reported to be affected. The linked references confirm t...
CVE-2007-5127
CVE-2007-5127 describes multiple XSS vulnerabilities in SimpGB 1.46.02 . The issues allow remote attackers to inject arbitrary JavaScript/HTML via two parameters: (1) l_username in the default admin/ URI and (2) l_emoticonlist in admin/emoticonlist.php. The root cause is unsanitized/unvalidated i...
CVE-2007-5129
SimpGB 1.46.02 is affected by improper access control where sensitive information is stored under the web root. An attacker can directly request admin/cfginfo.php to obtain configuration details and can download arbitrary .inc files (e.g., admin/includes/dbtables.inc). The root cause is insuffici...
CVE-2007-5133
Microsoft Windows Explorer (explorer.exe) is affected by CVE-2007-5133. A crafted PNG file with a large tEXt chunk may trigger an integer overflow in PNG chunk size handling, allowing user‑assisted remote attackers to cause a denial of service (CPU consumption). The connected sources explicitly d...
CVE-2007-5130
SimpGB 1.46.02 is affected by an information-disclosure vulnerability. An invalid lang parameter to admin/index.php or a direct request to admin/trailer.php can cause error messages to reveal the installation path, exposing sensitive information. The CVE entry documents this behavior and the affe...
CVE-2007-5126
Technical details about CVE-2007-5126 are not publicly available in the provided connected documents; no specific affected products, versions, impact, or remediation are disclosed. Monitor for updates.
CVE-2007-5128
SimpNews 2.41.03 on Windows is affected when PHP
CVE-2007-5134
Cisco Catalyst 6500 and Cisco 7600 Series devices are affected by CVE-2007-5134 due to handling of 127.0.0.0/8 EOBC (loopback) addresses, which could allow an unauthenticated, remote attacker to bypass ACLs and send packets to management interfaces such as the Supervisor or MSFC. The vulnerabilit...
CVE-2007-4872
CVE-2007-4872 affects SimpNews 2.41.03. The vulnerability is a path-disclosure flaw allowing remote attackers to learn server-side paths via errors from admin/index.php (invalid lang) and direct requests to admin/dbg_infos.php, admin/heading.php, or evsearch.php, exposing partial confidentiality....
CVE-2007-4873
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, enabling remote retrieval of arbitrary .inc files via direct requests (example: admin/includes/dbtables.inc). Root cause: information disclosure in PHP-based system; impact: partial confidentiality ...
CVE-2007-5124
CVE-2007-5124 concerns AOL AIM 6.5.3.12 and earlier, where an embedded Internet Explorer server control in the AIM client renders HTML content from IM messages without proper sanitization, enabling remote code execution. The root cause relates to inadequate handling of mshtml-based HTML/JS in mes...