CVE-2007-2366

CVE-2007-2366 describes a buffer overflow in Corel Paint Shop Pro 11.20 during PNG parsing, allowing user‑assisted remote code execution via a crafted PNG file. The underlying cause is a vulnerability in the PNG processing path that overflows a buffer when handling crafted inputs. The description...

GLSA-200704-19 : Blender: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200704-19 Blender: User-assisted remote execution of arbitrary code Stefan Cornelius of Secunia Research discovered an insecure use of the 'eval' function in kmzImportWithMesh.py. Impact : A remote attacker could entice a user to...

CVE-2007-2374: Undefined Security Weakness

Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. NOTE: this information is based upon a vague pre-advisory with no actionable information. However, the advisory is from a reliable sour...

Design/Logic Flaw

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

CVE-2007-2348

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

CVE-2007-2348: Undefined Security Weakness

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

Buffer overflow

Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file...

CVE-2007-2284

Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file...

CVE-2007-2283

Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file...

CVE-2007-2283

CVE-2007-2283 concerns a buffer overflow in the PSP file handling of Fresh View 7.15 , enabling a user‑assisted remote attacker to execute arbitrary code. The issue occurs when processing a crafted .PSP file, and is described as a buffer overflow that allows code execution with the attacker deliv...

Buffer overflow

Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted 1 BMP, 2 DIB, or 3 RLE file...

CVE-2007-2192

Buffer overflow in Photofiltre Studio 8.1.1 allows user-assisted remote attackers to execute arbitrary code via a crafted .tif file...

CVE-2007-2058: Undefined Security Weakness

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the file path in an 1 GZ, 2 TAR, 3 RAR, 4 JAR, or 5 ZIP archive...

CVE-2007-1946

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

CVE-2007-1904

CVE-2007-1904 describes a directory-traversal vulnerability in AOL Instant Messenger (AIM) ≤ 5.9 and ICQ ≤ 5.1 (likely earlier) that allows user-assisted remote attackers to write files to arbitrary locations by supplying a filename containing .. in a file transfer operation. The core issue is im...

CVE-2007-1912

CVE-2007-1912 relates to a heap-based buffer overflow in Microsoft Windows’ Help system (WinHelp) triggered by specially crafted .HLP files. The connected advisory CPAI-2007-254 describes a boundary/heap overflow in handling HLP files that could allow a remote attacker to inject and execute arbit...

CVE-2007-1912

Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file...

CVE-2007-1764

CVE-2007-1764 affects FastStone Image Viewer 2.8, where a stack-based buffer overflow in JPEG parsing allows a user-assisted remote attacker to execute arbitrary code. The issue stems from parsing a crafted JPEG image, enabling arbitrary code execution on the affected system. Descriptions consist...

CVE-2007-1763: Undefined Security Weakness

The ATI kernel driver atikmdag.sys in Microsoft Windows Vista allows user-assisted remote attackers to cause a denial of service crash via a crafted JPG image, as demonstrated by a slideshow, possibly due to a buffer overflow...

Mandrake Linux Security Advisory : file (MDKSA-2007:067)

Jean-Sebastien Guay-Leroux discovered an integer underflow in the fileprintf function in file prior to 4.20 that allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow. Updated packages have been patched to address this issue. %NASLMINLEVEL...