CVE Vulnerability Catalog

The init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.

Vulnerability in the Archive::Zip Perl module before version 1.14, used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

The binfmt_elf loader in Linux kernel 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8 improperly handles a failed call to the mmap function, resulting in an incorrect mapped image. A local user can exploit this vulnerability to execute arbitrary code.

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.

A buffer overflow vulnerability in the get_file_list_stdin function in jpegtoavi 1.5 allows remote attackers to execute arbitrary code via a crafted set of JPEG files and filenames.

Cross-site scripting vulnerability in the Gadu-Gadu instant messenger parser allows remote attackers to inject arbitrary HTML or script code via http:// or news:// URLs. This is a different vulnerability than CVE-2004-1410.

The Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), used in WordPad, does not properly validate certain data lengths, allowing remote attackers to execute arbitrary code via .wri, .rtf, and .doc files sent by email or from a malicious website, known as 'Font Conversion Vulnerability', a different vulnerability than CVE-2004-0571.

Buffer overflow vulnerability in the get_field_headers function in csv2xml.cpp of csv2xml version 0.5.1. A remote attacker can exploit a crafted CSV file to execute arbitrary code.

Multiple integer overflows in zgv 5.8 image reading functions (BMP, GIF, PNG, TIFF, etc.) allow remote code execution via crafted image headers that cause buffer overflows.

The vulnerability in Opera 7.x up to version 7.54 allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability.

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an integer overflow/underflow in the pack function, or (3) an integer overflow/underflow in the unpack function.

Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.

Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before version 2.3.2.97, used in CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.

The vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter.

Vulnerability in Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via a crafted ftp:// URL containing a URL-encoded newline (%0a) before the FTP command, causing command injection into the FTP session, as demonstrated with a PORT command.

Vulnerability in VIM and gVIM before version 6.3 allows local users to execute arbitrary commands by opening a file containing a crafted modeline. The attack uses options such as termcap, printdevice, titleold, filetype, syntax, backupext, keymap, patchmode, or langmenu.

Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious 'grep' program, which is executed from chcod.

Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious 'uname' program, which is executed from lsvpd after lsvpd has been invoked by invscout.

Buffer overflow vulnerability in the simplify_path function in config.c of ChBg 1.5. A remote attacker can execute arbitrary code via a crafted chbg scenario file.