65 matches found
CVE-2005-0667
CVE-2005-0667 is a buffer‑overflow in Sylpheed’s header processing when replying to messages that contain non‑ASCII headers. Affected are Sylpheed before 1.0.3 and other versions before 1.9.5; successful exploitation can allow remote code execution with the user’s privileges. Several connected ad...
CVE-2003-0699
The CVEs describe a vulnerability in the C-Media PCI sound driver for Linux. CVE-2003-0699 affects Linux kernel versions prior to 2.4.21, where the driver accesses userspace without using get_user, crossing security boundaries. CVE-2003-0700 similarly affects the driver in kernels prior to 2.4.22...
CVE-2004-0111
CVE-2004-0111 affects gdk-pixbuf prior to 0.20; processing a malformed BMP can crash the application (denial of service). Debian/Red Hat advisories confirm a fix in newer gdk-pixbuf releases (e.g., RHSA-2004:103 recommends upgrading to a non-vulnerable version such as 0.22). The issue arises in t...
CVE-2004-1174
The CVE-2004-1174 vulnerability affects Midnight Commander (mc) up to and including version 4.5.55, in which direntry.c contains the flaw that allows a denial of service via manipulating non-existing file handles. The description clearly states this is a denial of service condition caused by the ...
CVE-2004-1090
CVE-2004-1090 affects Midnight Commander (mc) up to version 4.5.55, where a remote attacker could trigger a denial of service via a corrupt section header. Multiple issuances (RHSA, DSA, CentOS advisories, Debian) indicate mc updates were released to fix this and related issues (e.g., upgraded to...
CVE-2004-1139
CVE-2004-1139 corresponds to an unknown vulnerability in Ethereal’s DICOM dissector that affects version 0.10.4 through 0.10.7 and can be exploited remotely to crash the application, causing a denial of service. The connected advisories reference multiple vendor/security pages (Red Hat, Gentoo GL...
CVE-2004-0105
CVE-2004-0105 refers to multiple buffer overflows in Metamail 2.7 and earlier that allow remote attackers to execute arbitrary code. The provided connected documents corroborate the vulnerability across various advisories (Gentoo/Debian/FreeBSD/OpenVAS) but do not supply concrete patch/version de...
CVE-2004-1092
CVE-2004-1092 affects Midnight Commander (mc) 4.5.55 and earlier. The issue allows remote Denial-of-Service by causing mc to free unallocated memory (root cause: improper memory handling). The connected sources indicate a fix in Midnight Commander 4.6.0. Remediation: upgrade to MC 4.6.0 or newer ...
CVE-2003-0548
GDM (GNOME Display Manager) vulnerable to DoS via XDMCP in versions before 2.4.1.6. The issue affects the XDMCP handling and may cause the daemon to crash when certain authorization data or host expiry conditions are encountered. Public descriptions indicate the two related CVEs (CVE-2003-0548 an...
CVE-2004-0633
The CVE-2004-0633 issue affects Ethereal’s iSNS dissector (versions 0.10.3–0.10.4). A remote, unauthenticated attacker could cause a crash or potentially execute code by sending malformed iSNS packets, per included reports. Impact is a denial of service (partial availability) and possible code ex...
CVE-2004-1175
CVE-2004-1175 affects Midnight Commander (mc); the fish protocol handler allows remote code execution via insecure filename quoting, potentially with shell metacharacters. Public advisories (e.g., Debian DSA-639-1, Red Hat RHSA-2005:512, CentOS advisory) describe the issue and list the affected M...
CVE-2004-1091
CVE-2004-1091 affects Midnight Commander (mc) up to version 4.5.55 and earlier, where a remote user can cause a denial of service by triggering a null pointer dereference. The issue is listed among multiple MC vulnerabilities (with related CVEs) and is discussed in various advisories and vulnerab...
CVE-2004-1009
Summary (CVE-2004-1009) Midnight Commander (mc) versions up to 4.5.55 are affected. The vulnerability allows a remote attacker to trigger a denial of service (infinite loop) via unknown attack vectors. Public sources in the connected documents tie this CVE to multiple advisories (e.g., RHSA-2005:...
CVE-2004-1093
CVE-2004-1093 affects Midnight Commander (mc) up to version 4.5.55. The issue is a memory-management vulnerability (use-after-free) that can cause a denial of service when a vulnerable file/operation triggers freeing of memory that is subsequently used. Public references in the provided documents...
CVE-2005-1061
CVE-2005-1061 affects LogWatch, where the secure script before version 2.6-2 can be influenced by attacker-supplied strings in /var/log/secure that later form part of a regular expression, causing the parser to crash and enabling a DoS. The vulnerability is described in multiple sources (NVD/NVD-...