6446 matches found
CVE-2008-6679
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service ps2pdf crash and possibly execute arbitrary code via a crafted Postscript file...
CVE-2008-6679
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service ps2pdf crash and possibly execute arbitrary code via a crafted Postscript file...
CVE-2008-6669
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the varfilename parameter in a 1 tif or 2 pdf format action...
CVE-2008-6679
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service ps2pdf crash and possibly execute arbitrary code via a crafted Postscript file...
CVE-2008-6661
Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed 1 NeoLite and 2 ASProtect packed PE file...
CVE-2009-1257
Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted CCD file...
CVE-2008-6661
Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed 1 NeoLite and 2 ASProtect packed PE file...
Remote file inclusion
PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter...
Sql injection
Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...
Sql injection
Multiple SQL injection vulnerabilities in the inserttopastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the 1 subject, 2 language, and 3 nickname parameters to...
CVE-2009-1245
Multiple SQL injection vulnerabilities in the inserttopastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the 1 subject, 2 language, and 3 nickname parameters to...
Stack overflow
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action...
CVE-2009-1169
The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an XML file with a crafted XSLT transform...
CVE-2009-1092
Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments...
CVE-2009-1086
Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns 1.4.x allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a DNS resource record RR with a long 1 class field clas variable and possibly 2 TTL field...
CVE-2009-1086
Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns 1.4.x allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a DNS resource record RR with a long 1 class field clas variable and possibly 2 TTL field...
CVE-2009-1086
CVE-2009-1086 affects ldns: a heap-based buffer overflow in ldns_rr_new_frm_str_internal in ldns 1.4.x can be triggered by a DNS RR with a long class field (and possibly TTL), leading to denial of service and potential arbitrary code execution. Public docs indicate the issue arises during parsing...
Stack overflow
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2009-1061
CVE-2009-1061 (and related CVEs: 0193, 1062, 0658, 0927, 0928) describe multiple input-validation flaws in Adobe Reader/Acrobat and the JBIG2 decoder that could allow remote code execution via specially crafted PDF files. Affected versions include Adobe Acrobat/Reader before 9.1 (and 8 before 8.1...