CVE Vulnerability Catalog

A buffer overflow vulnerability in the MSN protocol handler of Gaim versions 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an unexpected sequence of MSNSLP messages, resulting in an unbounded copy operation that writes to the wrong buffer.

A vulnerability in the McAfee Anti-Virus Engine allows a remote attacker to bypass antivirus protection by sending a compressed file where both local and global headers are set to zero. Such a file is not blocked by the software and can be opened on the target system.

A vulnerability in RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

The vulnerability in Eset Anti-Virus before version 1.020 (September 16, 2004) allows a remote attacker to bypass antivirus protection via a compressed file with both local and global headers set to zero. Such a file can be opened on the target system without being detected by the antivirus software.

A vulnerability in Computer Associates (CA) antivirus products allows remote attackers to bypass antivirus protection by sending a compressed file with both local and global headers set to zero. Such a file is not detected as malicious but can be opened on the target system.

A vulnerability in the AFP server on Mac OS X 10.3.x through 10.3.5 allows a guest who has mounted an AFP volume to terminate authenticated user sessions by sending modified SessionDestroy packets.

A heap-based buffer overflow vulnerability in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 allows remote attackers to execute arbitrary code via a specially crafted BMP image.

Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via the 'Send page' functionality, certain responses from a malicious POP3 server, or a link containing a non-ASCII hostname.

Vulnerability in Kaspersky versions 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.

Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.

Multiple integer overflows in xpdf 3.0 and other packages that use xpdf code such as CUPS allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.

Vulnerability in Microsoft Proxy Server 2.0 and ISA Server 2000 allows a remote attacker to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.

The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.

A stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name.

PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.

A buffer overflow vulnerability in the wsprintf function of W32Dasm version 8.93 and earlier allows remote attackers to execute arbitrary code by providing a long import or export function name.

Buffer overflow in the -v and -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code.