CVE Vulnerability Catalog

A vulnerability in Windows 2000, XP, and Server 2003 due to improper validation of memory regions for COM structured storage files allows an attacker to execute arbitrary code via a specially crafted file.

Vulnerability in consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter.

The License Logging service in Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate message length, leading to an unchecked buffer. A remote attacker can exploit this to cause a denial of service (crash) and potentially execute arbitrary code.

The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information about users accessing resources via anonymous logon using a named pipe that is not properly authenticated, known as the Named Pipe Vulnerability.

A buffer overflow vulnerability in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.

Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.

Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name.

Buffer overflow vulnerability in the Decrypt::makeFileKey2 function in xpdf version 3.00 and earlier allows remote attackers to execute arbitrary code via a specially crafted PDF file with a large /Encrypt /Length keyLength value.

The vulnerability in the TCP design involves the lack of checking whether the TCP sequence number in an ICMP error message falls within the range of sequence numbers for sent but unacknowledged data. This allows attackers to forge ICMP messages for specific TCP connections, leading to denial-of-service (DoS) attacks via connection resets, throughput reduction, or Path MTU reduction.

Multiple SQL injection vulnerabilities in mod.php of phpCOIN versions 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via parameters such as faq_id, id, topic_id, ord_id, dom_id, or invd_id in various modules.

SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file.

Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library.

A format string vulnerability in bidwatcher before version 1.3.17 allows remote malicious web servers from eBay or a spoofed eBay server to cause a denial of service and possibly execute arbitrary code via certain responses.

Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.

Vulnerability in the SimpleXMLRPCServer module in Python 2.2, 2.3 before 2.3.5, and 2.4 allows remote attackers to read or modify module globals and potentially execute arbitrary code when an XML-RPC server uses register_instance without a _dispatch method.

Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls.

In the modes.c file in smail 3.2.0.120, signal handlers are implemented using unsafe library calls. This may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.

SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter.

Vulnerability in ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.

Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via a long test value in an xsl:when tag, a long test value in an xsl:if tag, or a long select value in an xsl:value-of tag.