CVE-2006-0007

CVE-2006-0007 is described in connected advisories as a Linux kernel vulnerability (2.6.9–2.6.20) where the key_alloc_serial function allows remote DoS via vectors triggering a null dereference (spinlock CPU recursion). Remediation is to upgrade to the fixed kernel version (2.6.19.3 per the chang...

CVE-2006-0033

CVE-2006-0033 is a remote code execution vulnerability in Microsoft Office products (Office 2003 SP1/SP2, Office XP SP3, Office 2000 SP3, and related components) that occurs when parsing a crafted PNG image, causing memory corruption. The issue allows an attacker to gain control of an affected sy...

VulnCheck KEV: CVE-2006-3059

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086...

VulnCheck KEV: CVE-2006-1301

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302...

CVE-2006-3493

CVE-2006-3493 (Microsoft Office) involves a buffer overflow in the LsCreateLine function of mso.dll and mso9.dll used by Word and possibly other Office components (Office 2000–2003). The memory corruption could crash the Word client or potentially lead to arbitrary behavior when processing crafte...

CVE-2006-3431

CVE-2006-3431 describes a remote code execution vulnerability in Microsoft Excel related to the handling of the STYLE record in various Asian-language Excel versions. The flaw is a stack-based buffer overflow triggered when parsing a crafted spreadsheet, potentially allowing code execution if a u...

CVE-2006-3356

The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service application crash via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469...

CVE-2006-3356

The connected CVE-2006-3356 entries confirm a vulnerability in ImageIO on Apple Mac OS X affected versions up to 10.4.7 and earlier. The issue is triggered by a crafted TIFF image containing an invalid tag value that leads to a denial of service (application crash) and may cause a null dereferenc...

CVE-2006-3356

The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service application crash via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469...

CVE-2006-2910

Buffer overflow in jetAudio 6.2.6.8330 Basic, and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file such as WMA with long ID Tag values including 1 Title, 2 Author, and 3 Album, which triggers the overflow in the tooltip display string if the soun...

CVE-2006-3326

Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via .. dot dot sequences in filenames within 1 TAR,2 GZ, and 3 JAR archives. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-3326

The CVE-2006-3326 entry describes a directory-traversal vulnerability in QuickZip 3.06.3 where remote attacker-controlled dot-dot sequences in filenames inside TAR, GZ, and JAR archives can cause overwriting of arbitrary files or directories. The root cause is improper handling of archive filenam...

CVE-2006-2199

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...

Security feature bypass

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...

CVE-2006-2198

OpenOffice.org aka StarOffice 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user...

CVE-2006-2199

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...

EUVD-2006-2200

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...

CVE-2006-2199

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...

Integer overflow

Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...

CVE-2006-1467

Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...