CVE Vulnerability Catalog

The WebBrowser ActiveX control or the MSHTML rendering engine in Internet Explorer 6 allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute JavaScript, as demonstrated via delayed HTTP redirects with a Location header containing a "URL:" prefix before a "ms-its" protocol URI, or by modifying the window's location attribute.

Real Networks RealPlayer 10 contains a buffer overflow vulnerability that can be exploited by a remote attacker to execute arbitrary code via a URL containing a large number of period characters.

Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.

A vulnerability in LaunchServices on Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user.

Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

Heap-based buffer overflow in proxy_util.c of mod_proxy in Apache 1.3.25 to 1.3.31. A remote attacker can send an HTTP Content-Length header with a negative value, causing large data copying and leading to process crash or potential arbitrary code execution.

A buffer overflow vulnerability in the ntlm_check_auth (NTLM authentication) function of Squid Web Proxy Cache versions 2.5.x and 3.x, compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).

A stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0 allows local or remote attackers to execute arbitrary code via a .job file containing long parameters.

Vulnerability in page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter.

Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.

Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite versions 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10 allows remote attackers to read and delete arbitrary files via '..' sequences in the dynamicimag argument to crystalimagehandler.aspx.

CVS versions from 1.11.x to 1.11.16 and from 1.12.x to 1.12.8 improperly handle empty data lines, which may allow remote attackers to perform an out-of-bounds write. This can lead to arbitrary code execution or modification of critical program data.

LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.

A buffer overflow vulnerability in the write_packet function in control.c for l2tpd may allow remote attackers to execute arbitrary code.

Vulnerability in Safari web browser on Mac OS X 10.3.4 and 10.2.8. The 'Show in Finder' button may execute downloaded applications, allowing remote attackers to execute arbitrary code.

Vulnerability in Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.

CVE-2004-0416 describes a double free vulnerability for the error_prog_name string in CVS versions 1.12.x through 1.12.8 and 1.11.x through 1.11.16. This may allow remote attackers to execute arbitrary code.

libsvn_ra_svn in Subversion 1.0.4 trusts the length field of svn protocol URLs, allowing remote attackers to cause a denial of service through a heap-based buffer overflow.

Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the putlvcb or getlvcb commands.