CVE Vulnerability Catalog

Buffer overflow vulnerability in the mysql_real_connect function in MySQL 4.x before 4.0.21 and 3.x before 3.23.49. Remote DNS servers can cause a denial of service and potentially execute arbitrary code via a DNS response with a large address length (h_length).

Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.

RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, Windows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names.

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allow attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an 'unchecked buffer,' possibly a buffer overflow.

An unknown vulnerability in the Graphics Rendering Engine of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via Windows Metafile (WMF) or Enhanced Metafile (EMF) image formats that involve 'an unchecked buffer.'

The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the 'SSLCipherSuite' directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Vulnerability in MySQL before versions 3.23.59, 4.0.19, 4.1.2, and 5.0.1 incorrectly checks CREATE/INSERT privileges on the original table instead of the target table during an ALTER TABLE RENAME operation. This could allow attackers to perform unauthorized actions on tables.

Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, leading to a heap-based buffer overflow.

Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) versions 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

A heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet.

The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to port 254, which displays a management interface and information on established connections.

A format string vulnerability in log.c in rssh before version 2.2.2 allows remote authenticated users to execute arbitrary code.

Multiple SQL injection vulnerabilities in Dwc_articles 1.6 and earlier allow remote attackers to execute arbitrary SQL statements.

Buffer overflow vulnerability in Ability Server versions 2.25, 2.32, 2.34, and possibly others, allows remote attackers to execute arbitrary code via a long APPE command.

SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter.

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, allowing local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe).

A vulnerability in libpng version 1.2.5 and earlier results from improper calculation of buffer offsets. A remote attacker can exploit this flaw to cause a buffer overflow and execute arbitrary code.

Multiple buffer overflows in Gaim before version 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via RTF messages, a long hostname from DNS, or a long URL mishandled by the URL decoder.