CVE Vulnerability Catalog

Windows Media Player (WMP) 7 and 8, running on Internet Explorer and possibly other Microsoft products that process HTML, allows remote attackers to bypass zone restrictions and access or execute arbitrary files via an IFRAME tag pointing to an ASF file whose Content-location contains a File:// URL.

Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, allowing attackers to redirect URLs to malicious web sites.

Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare version 0.9.16preRC and earlier, related to the VFS path being under the web document root.

Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference.

Apple QuickTime / Darwin Streaming Server before version 4.1.3g is vulnerable to an attack that can lead to service crashes. Attackers can exploit a .. (dot dot) sequence followed by an MS-DOS device name (e.g. AUX) in a request to HTTP port 1220.

Microsoft SQL Server 7, 2000, and MSDE allow local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port, leading to a buffer overflow.

Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary code.

The default installation of MSDE via McAfee ePolicy Orchestrator versions 2.0 to 3.0 allows attackers to execute arbitrary code. This process involves obtaining the database administrator username and encrypted password from a configuration file, cracking the password due to weak cryptography, and using it to pass commands through xp_cmdshell.

Internet Explorer versions 5.01 SP3 through 6.0 SP1 improperly determine object types returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter pointing to a malicious file.

The installation of Apple QuickTime / Darwin Streaming Server before version 4.1.3f starts the administration server with a 'Setup Assistant' page that allows remote attackers to set the administrator password and gain privileges before the real administrator.

Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long parameters.

The 'Named Pipe Hijacking' vulnerability in Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user.

Up2date versions 3.0.7 and 3.1.23 do not properly verify RPM GPG signatures, which could allow remote attackers to install unsigned packages from the Red Hat Network if that network is compromised.

Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with large length for a Text or Copyright string, or a large number of tracks, leading to a heap-based buffer overflow.

An unknown vulnerability in the display of Merge before version 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.

Internet Explorer versions 5.01 SP3 through 6.0 SP1 allow remote attackers to access and execute scripts in the My Computer zone using the browser cache via crafted Content-Type and Content-Disposition headers.

Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag.

Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.

Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program may allow remote attackers to execute arbitrary code via a long URL. This affects Oracle E-Business Suite versions from 11.0 to 11.5.8.