CVE Vulnerability Catalog

An integer overflow in the pixbuf_create_from_xpm function (io-xpm.c) of the XPM image decoder in gtk+ 2.4.4 and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via crafted n_col and cpp values that trigger a heap-based buffer overflow.

A vulnerability in libpng version 1.2.5 and earlier results from improper calculation of buffer offsets. A remote attacker can exploit this flaw to cause a buffer overflow and execute arbitrary code.

Multiple stack-based buffer overflows were found in libXpm before version 6.8.1 in functions xpmParseColors, ParseAndPutPixels, and ParsePixels. A remote attacker can exploit a specially crafted XPM image file to execute arbitrary code.

The calendar program in bsdmainutils versions 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, allowing attackers to execute arbitrary commands via a calendar event file.

A stack-based buffer overflow in the xpm_extract_color function (io-xpm.c) of the XPM image decoder in gtk+ 2.4.4 and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a crafted color string.

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

In redhat-config-nfs before version 1.0.13, an unknown vulnerability when shares are exported to multiple hosts can cause incorrect permissions and prevent the all_squash option from being applied.

An integer overflow in Gaim before version 0.82 in the size variable of Groupware server messages allows remote attackers to cause a denial of service and possibly execute arbitrary code.

A buffer overflow vulnerability in WIDCOMM Bluetooth Connectivity Software, used in products such as BTStackServer 1.3.2.7 and 1.4.2.10, Windows XP and Windows 98 with MSI Bluetooth Dongles, and HP IPAQ 5450 running WinCE 3.0, allows remote attackers to execute arbitrary code via specially crafted service requests.

A format string vulnerability in the auth_debug function in Courier-IMAP versions 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.

Vulnerability in DB2 8.1 allows local users to escalate privileges via the remote command server (DB2RCMD.EXE), which executes the db2rcmdc.exe program as the db2admin administrator. Attackers can exploit the DB2REMOTECMD named pipe to gain control.

Multiple integer overflows in libXpm before version 6.8.1 in functions xpmParseColors, XpmCreateImageFromXpmImage, CreateXImage, ParsePixels, and ParseAndPutPixels may allow remote attackers to execute arbitrary code via a malformed XPM image file.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as uuencode, mac-binhex40, and yenc.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters or incorrectly use standard separators within MIME headers, fields, parameters, or values.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages with malformed quoting in MIME headers, parameters, and values.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients.