CVE Vulnerability Catalog

Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name.

SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (extreme message board) 1.9.6 Alpha and earlier. The u2uid parameter passed to u2u.php is taken directly from $_POST, bypassing the protection scheme and allowing arbitrary SQL command execution.

An unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files. Technical details of the vulnerability are not specified.

A vulnerability in CA eTrust Antivirus WebScan before version 1.1.0.1048 involves improper processing of outdated WebScan components. Technical details are unspecified, and the impact is unknown. The vulnerability may be exploited remotely by attackers.

A vulnerability in CA eTrust Antivirus WebScan is caused by improper bounds checking when processing certain user input. This allows remote attackers to execute arbitrary code.

The TIFF library (libtiff) before 3.8.2 contains an integer overflow when processing large offset values in a TIFF directory. This can allow context-dependent attackers to bypass numeric range checks, trigger assert errors, and possibly execute arbitrary code.

Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, including in the TIFFFetchShortPair function in tif_dirread.c, where a large tdir_count value can trigger an overflow. The vulnerability also affects products using this library, such as Adobe Reader 9.3.0.

Heap-based buffer overflow in the JPEG decoder of the TIFF library (libtiff) before 3.8.2. A context-dependent attacker can supply a crafted JPEG stream longer than the scan line size (TiffScanLineSize), causing a denial of service and possibly arbitrary code execution.

A vulnerability in the dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an improperly handled condition that leads to the use of dangerous paths, probably related to an untrusted search path vulnerability.

Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.

A vulnerability in WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated.

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via decoding large RLE images.

The EstimateStripByteCounts function in the TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, triggering an infinite loop.

An unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.

A stack-based buffer overflow exists in the bootpd service within the DHCP component of Apple Mac OS X 10.3.9 and 10.4.7. A remote attacker can execute arbitrary code by sending a crafted BOOTP request.

A PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code by supplying a URL in the cfg_root parameter.

Banex PHP MySQL Banner Exchange 2.21 contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL commands via the site_name parameter in signup.php and the id, deleteuserbanner, viewmem, viewmemunb, viewunmem, and deleteuser parameters in admin.php.

Remote file inclusion (RFI) vulnerability in the bayesiannaivefilter component 1.1 for Mambo. An attacker can execute arbitrary PHP code by supplying a malicious URL in the mosConfig_absolute_path parameter.

Remote file inclusion (RFI) vulnerability in MamboXChange Moskool 1.5 component for Mambo. An unauthenticated attacker can execute arbitrary PHP code by supplying a malicious URL in the mosConfig_absolute_path parameter.

Remote file inclusion (RFI) vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package used by MyNewsGroups :) 0.6b and earlier. A remote attacker can execute arbitrary PHP code by supplying a URL in the myng_root parameter.