CVE Vulnerability Catalog

In Common Unix Printing System (CUPS) versions 1.1.14 through 1.1.17, there is a vulnerability that does not properly check for zero-length GIF images. This allows remote attackers to execute arbitrary code via modified chunk headers.

Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute.

CUPS versions 1.1.14 through 1.1.17 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by feeding negative arguments into memcpy() calls via HTTP requests with a negative Content-Length value or a negative length in chunked transfer encoding.

CUPS versions 1.1.14 through 1.1.17 do not properly check the return values of various file and socket operations. This could allow a remote attacker to cause a denial of service by exhausting resources.

Multiple buffer overflows in Winamp 3.0 when displaying an MP3 in the Media Library window allow remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Album ID3v2 tag.

Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file.

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.

Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.

A vulnerability in the priocntl system call in Solaris allows local users to execute arbitrary code via '..' sequences in the pc_clname field of a pcinfo_t structure, causing priocntl to load a malicious kernel module.

The libmysqlclient client library in MySQL versions 3.x to 3.23.54 and 4.x to 4.0.6 does not properly verify length fields for certain responses in the read_rows and read_one_row routines. This may allow remote attackers to cause a denial of service and potentially execute arbitrary code.

Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, allowing remote attackers to cause an application crash.

The overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.

Fetchmail versions 6.1.3 and earlier have a heap-based buffer overflow that does not account for the '@' character when determining buffer lengths for local addresses. This allows remote attackers to execute arbitrary code via a header with a large number of local addresses.

CVE-2002-1381 describes a format string vulnerability in daemon.c for Exim versions 4.x through 4.10 and 3.x through 3.36, allowing Exim administrative users to execute arbitrary code by modifying the pid_file_path value.

Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF).

The COM_CHANGE_USER command in MySQL versions 3.x before 3.23.54 and 4.x before 4.0.6 allows remote attackers to gain privileges via a brute force attack using a one-character password, causing MySQL to only compare the provided password against the first character of the real password.

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.

The COM_CHANGE_USER command in MySQL versions 3.x before 3.23.54 and 4.x up to 4.0.6 allows remote attackers to execute arbitrary code via a long response.

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks.