Buffer overflow

Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of arguments or property values, a different DLL than CVE-2007-4816. NOTE: the provenance of this informati...

CVE-2007-1865

The ipv6getsockoptsticky function in the kernel in Red Hat Enterprise Linux RHEL Beta 5.1.0 allows local users to obtain sensitive information kernel memory contents via a negative value of the len parameter. NOTE: this issue has been disputed in a bug comment, stating that "len is ignored when...

CVE-2007-4939

The CVE describes a heap-based buffer overflow in mplayerc.exe used by Media Player Classic (MPC) 6.4.9.0 and earlier, including variants like mympc, StormPlayer, and CD-Storm. Affected component is mplayerc.exe handling certain .avi files, where an indx truck size of 0xffffffff together with spe...

CVE-2007-0997

CVE-2007-0997 describes a race condition in the Linux kernel 2.6.17 through 2.6.17.6 affecting the tee (sys_tee) system call. The issue could allow local users to cause a denial of service (system crash), obtain sensitive information (kernel memory contents), or gain privileges via unspecified ve...

CVE-2007-4941

KMPlayer 2.9.3.1210 and earlier is affected by a remote denial-of-service condition caused by processing a crafted .avi file with unusually large \

CVE-2007-4938

MPlayer up to 1.0rc1 (and earlier) is affected by a vulnerability where remote attackers can trigger a denial of service (SIGSEGV and application crash) by supplying malformed multimedia files. The confirmed vectors include malformed MP3, Ogg Vorbis, MPEG-1/2, AVI, FLAC, Ogg Theora, WMV, and AAC ...

CVE-2007-1865

The CVE-2007-1865 entry concerns the Linux kernel used in Red Hat Enterprise Linux (RHEL) Beta 5.1.0, where the ipv6_getsockopt_sticky function may allow local users to read sensitive kernel memory contents via a negative len value. Multiple connected sources reiterate this, noting that the issue...

CVE-2007-4940

CVE-2007-4940 describes multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier (including bundled variants such as mympc/CD-Storm and StormPlayer) that may allow a remote attacker to crash the application or possibly execute arbitrary code when processing a crafted .avi file...

CVE-2007-4942

CVE-2007-4942 describes a PHP remote file inclusion in Focus/SIS 1.0, specifically in modules/Discipline/StudentFieldBreakdown.php, exploitable via a URL in the FocusPath parameter. The vulnerability could allow remote attackers to execute arbitrary PHP code with partial impact to confidentiality...

CVE-2007-4944

CVE-2007-4944 affects Opera 9.x before 9.22 on Linux, FreeBSD, and Solaris. The underlying issue is that canvas.createPattern does not clear memory before using it to process a new pattern, which can allow a remote attacker to read memory contents via JavaScript. The vulnerability is described ac...

CVE-2007-4936

Technical details, affected products/versions, and remediation for CVE-2007-4936 are not provided in the supplied documents. Monitor for updates from authoritative sources.

CVE-2007-4943

Technical details for CVE-2007-4943 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2007-4946

Technical details about CVE-2007-4946 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-4942

PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...

CVE-2007-4137

The CVE-2007-4137 issue is an off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3, causing a heap-based buffer overflow that can lead to a denial of service via a crafted Unicode string. Qt 4 reportedly has a similar error in QUtf8Codec::convertToUnicode, but it is not expl...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 admin.php, 2 custompages.php, 3 draft.php, 4 faq.php, 5 leagues.php, 6 livedraft.php, 7 login.php, 8 myteam.php, 9 profile.php, 10...

CVE-2007-4932

admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel...

Immunity Canvas: PHPFFL_INCLUDE

Name| phpfflinclude ---|--- CVE| CVE-2007-4934 Exploit Pack| CANVAS Description| phpFFL 1.24 Remote file inclusion Notes| CVSS: 4.6 Repeatability: Infinite VENDOR: phpffl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4934 CVE Name: CVE-2007-4934...

CVE-2007-4933

Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php within Shop-Script FREE 2.0 and earlier allows remote attackers to inject arbitrary PHP into cfg/appearence.inc.php via the save_appearence action in admin.php, demonstrated with (1) productscount, (2) colscount,...

CVE-2007-4935

PHPFFL 1.24 contains multiple remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by supplying a URL to the PHPFFL_FILE_ROOT parameter on several pages (admin.php, custom_pages.php, draft.php, etc.). The vulnerabilities cover both general pages and specific ...