3437 matches found
CVE-2007-0715
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PICT file...
CVE-2007-0713
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie file...
CVE-2007-0714
Apple QuickTime UDTA atom integer overflow vulnerability (CVE-2007-0714) exists in parsing of UDTA data in QuickTime files. A crafted MOV file can trigger an integer overflow, leading to a heap overflow and potential remote code execution under the user’s context. Affected products are QuickTime ...
CVE-2007-0717
Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QTIF file...
CVE-2007-0712
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MIDI file...
CVE-2007-0715: Undefined Security Weakness
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PICT file...
CVE-2007-0716: Undefined Security Weakness
Stack-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QTIF file...
CVE-2007-0713: Undefined Security Weakness
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie file...
CVE-2007-0714: Undefined Security Weakness
Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom UDTA with an Atom size field with a large value...
CVE-2007-0718: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a QTIF file with a Video Sample Description containing a Color table ID of 0, which triggers memory corruption when QuickTime...
CVE-2007-1182
CVE-2007-1182 affects WebAPP prior to version 0.9.9.5, allowing remote Guest users to edit a Guest profile. The impact is described as unknown in the source, with no explicit remediation details provided in the connected documents.
Design/Logic Flaw
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...
CVE-2007-1090: Undefined Security Weakness
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service crash via a malformed WMF file, which triggers the crash when the user browses the folder...
CVE-2007-0913
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...
Design/Logic Flaw
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...
CVE-2007-0913
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...
CVE-2007-0913: Undefined Security Weakness
Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...
CVE-2007-0671
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks...
CVE-2007-0671: Undefined Security Weakness
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks...
CVE-2007-0644
Format string vulnerability in Apple Safari 2.0.4 419.3 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in filenames that are not properly handled when calling the 1 NSLog and 2 NSBeginAlertSheet Apple AppKit functions...