CVE Vulnerability Catalog

Buffer overflow vulnerability in the process_moves function in pgn2web.c of pgn2web 0.3 allows remote attackers to execute arbitrary code via a crafted PGN file.

Buffer overflow vulnerability in qwik-smtpd allows a remote attacker to use the server as an SMTP spam relay by sending a long HELO command, which overwrites the adjacent localIP data buffer.

In Veritas Backup Exec versions 8.x before 8.60.3878 Hotfix 68 and 9.x before 9.1.4691 Hotfix 40, the Agent Browser component contains a stack-based buffer overflow. A remote attacker can exploit this vulnerability by sending a registration request with a long hostname, allowing arbitrary code execution.

A buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username.

A vulnerability in Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability, a different vulnerability than CVE-2004-1122.

A buffer overflow vulnerability in the Microsoft W3Who ISAPI (w3who.dll) allows a remote attacker to cause a denial of service and potentially execute arbitrary code by sending a long query string.

Multiple buffer overflows in the write_heading function in subs.cpp and the trim_title function in parse.cpp in abctab2ps 1.6.3 allow remote attackers to execute arbitrary code via crafted ABC files.

SQL injection vulnerability in fdelmail.asp, addressc.asp, and possibly postmail.asp and fmvmail.asp in CMailServer 5.2 allows remote attackers to inject arbitrary SQL commands via the indexOfMail parameter, enabling deletion of email metadata or contact addresses.

SQL injection vulnerability in SugarCRM Sugar Sales before version 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the 'record' parameter in a DetailView action to index.php, and record parameters in other functionality.

Buffer overflow vulnerability in the simplify_path function in config.c of ChBg 1.5. A remote attacker can execute arbitrary code via a crafted chbg scenario file.

Vulnerability in VIM and gVIM before version 6.3 allows local users to execute arbitrary commands by opening a file containing a crafted modeline. The attack uses options such as termcap, printdevice, titleold, filetype, syntax, backupext, keymap, patchmode, or langmenu.

Vulnerability in Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via a crafted ftp:// URL containing a URL-encoded newline (%0a) before the FTP command, causing command injection into the FTP session, as demonstrated with a PORT command.

The vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter.

Cross-site scripting vulnerability in the Gadu-Gadu instant messenger parser allows remote attackers to inject arbitrary HTML or script code via http:// or news:// URLs. This is a different vulnerability than CVE-2004-1410.

The Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), used in WordPad, does not properly validate certain data lengths, allowing remote attackers to execute arbitrary code via .wri, .rtf, and .doc files sent by email or from a malicious website, known as 'Font Conversion Vulnerability', a different vulnerability than CVE-2004-0571.

Multiple integer overflows in zgv 5.8 image reading functions (BMP, GIF, PNG, TIFF, etc.) allow remote code execution via crafted image headers that cause buffer overflows.

The vulnerability in Opera 7.x up to version 7.54 allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability.

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an integer overflow/underflow in the pack function, or (3) an integer overflow/underflow in the unpack function.

Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.

Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to execute arbitrary code via a crafted gnutella response.