CVE-2009-2804

CVE-2009-2804 is an integer overflow in ColorSync that affects Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows. The overflow occurs when processing an embedded ColorSync profile in an image, leading to a heap-based buffer overflow that can cause a remote code execution or an...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

CVE-2008-2804

...

CVE-2008-2804

CVE-2008-2804 entry is rejected and not an active vulnerability; reference CVE-2008-2800 instead.

CVE-2007-2804

CVE-2007-2804: Multiple XSS vulnerabilities in CandyPress Store 3.5.2.14 and earlier. Affected component: scripts/prodList.asp. Vulnerable vectors: (1) brand and (2) Msg parameters. Remote attackers can inject arbitrary web script or HTML.

CVE-2006-2804

CVE-2006-2804 is a cross-site scripting (XSS) vulnerability in index.cfm of Goss Intelligent Content Management (iCM) 7.0 and earlier. The issue stems from input via the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected product: Goss iCM (versions 7.0 a...

CVE-2005-2804

CVE-2005-2804 describes an Integer overflow in the registry parsing code of GroupWise 6.5.3 (and possibly earlier versions) that could be triggered by a large TCP/IP port value stored in a Windows registry key. This flaw allows remote attackers to cause an application crash (denial of service). T...