1856 matches found
CVE-2007-2348
mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...
CVE-2007-2348: Undefined Security Weakness
mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...
Buffer overflow
Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file...
CVE-2007-2284
Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file...
CVE-2007-2283
CVE-2007-2283 concerns a buffer overflow in the PSP file handling of Fresh View 7.15 , enabling a user‑assisted remote attacker to execute arbitrary code. The issue occurs when processing a crafted .PSP file, and is described as a buffer overflow that allows code execution with the attacker deliv...
CVE-2007-2283
Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP file...
Buffer overflow
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted 1 BMP, 2 DIB, or 3 RLE file...
CVE-2007-2192
Buffer overflow in Photofiltre Studio 8.1.1 allows user-assisted remote attackers to execute arbitrary code via a crafted .tif file...
CVE-2007-2058: Undefined Security Weakness
Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the file path in an 1 GZ, 2 TAR, 3 RAR, 4 JAR, or 5 ZIP archive...
CVE-2007-1946
Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...
CVE-2007-1904
CVE-2007-1904 describes a directory-traversal vulnerability in AOL Instant Messenger (AIM) ≤ 5.9 and ICQ ≤ 5.1 (likely earlier) that allows user-assisted remote attackers to write files to arbitrary locations by supplying a filename containing .. in a file transfer operation. The core issue is im...
CVE-2007-1912
Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file...
CVE-2007-1912
CVE-2007-1912 relates to a heap-based buffer overflow in Microsoft Windows’ Help system (WinHelp) triggered by specially crafted .HLP files. The connected advisory CPAI-2007-254 describes a boundary/heap overflow in handling HLP files that could allow a remote attacker to inject and execute arbit...
CVE-2007-1764
CVE-2007-1764 affects FastStone Image Viewer 2.8, where a stack-based buffer overflow in JPEG parsing allows a user-assisted remote attacker to execute arbitrary code. The issue stems from parsing a crafted JPEG image, enabling arbitrary code execution on the affected system. Descriptions consist...
CVE-2007-1763: Undefined Security Weakness
The ATI kernel driver atikmdag.sys in Microsoft Windows Vista allows user-assisted remote attackers to cause a denial of service crash via a crafted JPG image, as demonstrated by a slideshow, possibly due to a buffer overflow...
Mandrake Linux Security Advisory : file (MDKSA-2007:067)
Jean-Sebastien Guay-Leroux discovered an integer underflow in the fileprintf function in file prior to 4.20 that allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow. Updated packages have been patched to address this issue. %NASLMINLEVEL...
CVE-2007-1658
Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a 1 local file or 2 UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using...
CVE-2007-1658: Undefined Security Weakness
Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a 1 local file or 2 UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using...
Stack overflow
Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org OOo Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to execute arbitrary code via a document with a long Note...
