CVE-2005-4129

CVE-2005-4129 is a reservation duplicate of CVE-2005-4092 (no separate details). Connected advisories describe Apple QuickTime/ iTunes heap/memory overflows affecting QuickTime components via crafted image/media files (GIF, TGA, TIFF, QTIF, STSD). The vulnerability class is heap-based overflow th...

CVE-2005-4127

CVE-2005-4127 is a duplicate of CVE-2005-4092 and not an active entry. The connected advisories describe Apple QuickTime/ iTunes heap overflow vulnerabilities in various image/media formats (GIF, TGA, TIFF, QTIF) leading to arbitrary code execution or denial of service. QuickTime 7.0.4 (and relat...

CVE-2005-4070

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3665. Reason: This candidate is a reservation duplicate of CVE-2005-3665. Notes: All CVE users should reference CVE-2005-3665 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-4070

CVE-2005-4070 entry is rejected/unused; refer to CVE-2005-3665.

CVE-2005-4067

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4031. Reason: This candidate is a reservation duplicate of CVE-2005-4031. Notes: All CVE users should reference CVE-2005-4031 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-4067

CVE-2005-4067 is rejected/not used and does not represent an active vulnerability entry.

CVE-2005-3994

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3967. Reason: This candidate is a duplicate of CVE-2005-3967. Notes: All CVE users should reference CVE-2005-3967 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Hot Links SQL 3.x XSS vuln.

Hot Links SQL 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hlsqldetails.shtml affected version:3.1.x and prior Product Description: irectory style index allows for easy...

Hot Links Pro 3.x XSS vuln.

Hot Links Pro 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hl3details.shtml affected version:3.x and prior Product Description: Directory style index allows for easy...

CVE-2005-3990

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-3619. Reason: This candidate is a duplicate of CVE-2006-3619. Notes: All CVE users should reference CVE-2006-3619 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3990

CVE-2005-3990 is rejected/not used and does not represent an active vulnerability entry.

CVE-2005-3965

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2607. Reason: This candidate is a duplicate of CVE-2004-2607. Notes: All CVE users should reference CVE-2004-2607 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3965

CVE-2005-3965 is marked as a duplicate of CVE-2004-2607 (Rejected reason in description). Connected documents confirm CVE-2004-2607 exists and describes a numeric casting discrepancy in sdla_xfer for Linux kernels (2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1) that can allow local users to read ker...

CVE-2006-0018

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3899. Reason: This candidate is a duplicate of CVE-2005-3899. Notes: All CVE users should reference CVE-2005-3899 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3898

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3567. Reason: This candidate is a reservation duplicate of CVE-2005-3567. Notes: All CVE users should reference CVE-2005-3567 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2006-0018

Summary: CVE-2005-3899 (Google Talk) describes a vulnerability in the automatic update feature where remote attackers can poison a target's DNS cache and cause a large update file to be sent, triggering CPU and memory exhaustion during signature verification (BenjiBug). The related entry CVE-2006...

CVE-2005-3637

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3530. Reason: This candidate is a duplicate of CVE-2005-3530. Notes: All CVE users should reference CVE-2005-3530 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2002-2160

Summary: CVE-2002-2160 is a duplicate of CVE-2002-1798 (DO NOT USE THIS CANDIDATE NUMBER). The connected records describe the underlying issue in MidiCart PHP, PHP Plus, and PHP Maxi. Affected software (as documented): MidiCart PHP, PHP Plus, and PHP Maxi. Vulnerability details (from connected CV...

CVE-2005-3637

CVE-2005-3637 is a duplicate of CVE-2005-3530 and is not a separate active entry. Connected data show CVE-2005-3530 documents a Cross-site scripting (XSS) vulnerability in Antville 1.1 that allows remote injection of arbitrary web script/HTML via the notfound.skin error document. Affected version...

CVE-2002-2147

CVE-2002-2147 is a duplicate of CVE-2002-1828. The exposed detail confirms Savant Webserver 3.1 is affected: remote attackers can crash the server by sending an HTTP GET request with a negative Content-Length value, causing a denial of service. This is supported by CVE records and OpenVAS/Nessus ...