Integer overflow

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

CVE-2007-5730

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of...

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

CVE-2007-4277

CVE-2007-4277 : Local privilege-escalation in Trend Micro’s AntiVirus engine (pre-8.550-1001) via insecure permissions on the DOS device \.\Tmfilter and an IOCTL handler (0xa0284403) that copies attacker-supplied data into a fixed-size buffer. Local users can send arbitrary content to the device,...

CVE-2007-5730

CVE-2007-5730 : Heap-based buffer overflow in QEMU 0.8.2 (used by Xen and possibly other products) allows local users to execute arbitrary code via crafted data in the net socket listen option. The MiracleLinux AXSA advisories list this CVE among issues affecting Xen-related components and, in up...

CVE-2007-1321

CVE-2007-1321 is a local heap-based buffer overflow in the QEMU NE2000 emulator (NE2000 network device) used by Xen and possibly other products. It stems from an integer signedness error that lets crafted register values bypass sanity checks and trigger overflow. Public references indicate relate...

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...

CVE-2007-5729

The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used...

CVE-2007-4863

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter...

CVE-2007-4861

SAXON 5.4, with displayerrors enabled, allows remote attackers to obtain sensitive information via 1 a direct request for news.php, 2 an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in 3 admin/, 4 rss/, and 5 the ro...

CVE-2007-5724

Multiple cross-site scripting XSS vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via 1 the categoryid parameter to users/kb.php, and possibly 3 the Email Box field in profile.php...

CVE-2007-5728

Cross-site scripting XSS vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inject arbitrary web script or HTML via certain input available in PHPSELF in 1 redirect.php, possibly related to 2 login.php, different vectors than CVE-2007-2865...

CVE-2007-5718

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...

CVE-2007-1323

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2893. Reason: this candidate was intended for one issue, but some sources used this identifier for a separate issue, and a duplicate identifier had also been created by the time dual use was detected. Notes: All CVE users...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2893. Reason: this candidate was intended for one issue, but some sources used this identifier for a separate issue, and a duplicate identifier had also been created by the time dual use was detected. Notes: All CVE users...

CVE-2007-4863

The CVE-2007-4863 entry concerns SAXON version 5.4, where a SQL injection vulnerability exists in example.php via the template parameter. The vulnerability arises when PHP magic_quotes_gpc is Off, allowing remote attackers to execute arbitrary SQL commands, potentially exposing data or altering i...

CVE-2007-5719

CVE-2007-5719 affects miniBB 2.1, with a vulnerability in bb_func_search.php allowing SQL injection via the table parameter to index.php. This enables remote attackers to execute arbitrary SQL commands. The provided documents do not include a confirmed remediation or patch details.

CVE-2007-5716

CVE-2007-5716 affects the Internet Protocol (IP) functionality in Sun Solaris 10 . The vulnerability is described as an unspecified local DoS (panic) caused by vectors likely related to a UDP packet. The exact component/file, root cause, and affected versions beyond Solaris 10 are not detailed in...

CVE-2007-5727

CVE-2007-5727 describes an incomplete blacklist vulnerability in OneOrZero Helpdesk (common.php, stripScripts) that allows remote XSS via the description parameter to tcreate.php or tupdate.php (e.g., using an onmouseover event in a tag). Affected versions include 1.6.5.4 and 1.6.4.2, with poten...

CVE-2007-5722

A stack-based buffer overflow exists in the GLChat.ocx 2.5.1.32 ActiveX control within GlobalLink 2.7.0.8 , notably used in Ourgame GLWorld . The vulnerability is caused by a lack of proper bounds-checking when handling user-supplied data via a long first argument to the ConnectAndEnterRoom metho...