CVE Vulnerability Catalog

A buffer overflow in the find_next_file function in playlist.c of mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.

The gui_popup_view_fly function in gui_tview_popup.c in junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename.

Buffer overflow vulnerability in the switch_voice function in parse.c of jcabc2ps 20040902 allows remote attackers to execute arbitrary code via a crafted ABC file.

The DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a filename with shell metacharacters.

A buffer overflow vulnerability in the DownloadLoop function in main.c of greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a long filename.

A buffer overflow vulnerability in the ReadFontTbl function in reader.c of rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a crafted RTF file.

Unknown vulnerability in the bsd.a kernel networking for SGI IRIX versions 6.5.22 through 6.5.25, and possibly earlier, in which 't_unbind changes t_bind's behavior.'

Buffer overflow in the save_embedded_address function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers to execute arbitrary code via a crafted email message.

Buffer overflow vulnerability in the readObjectChunk function in 3dsimp.cpp of the convex-tool program in Convex 3D 0.8pre1. A remote attacker can exploit a crafted 3DS file to execute arbitrary code.

Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.

Buffer overflow vulnerability in the process_abc function in abc.c of abc2mtex 1.6.1 allows remote attackers to execute arbitrary code via crafted ABC files.

Multiple buffer overflows in the event_text and event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.

The HyperTerminal application in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value saved in a session file, allowing remote attackers to execute arbitrary code via a malicious .ht session file, website, or Telnet URL in an email, triggering a buffer overflow.

Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.

Buffer overflow vulnerability in the dxfin function in d.c of dxfscope 0.2 allows remote attackers to execute arbitrary code via a crafted DXF file.

Buffer overflow in the bsb_open_header function in libbsb for bsb2ppm 0.0.6 allows remote attackers to execute arbitrary code via crafted BSB pictures.

A stack-based buffer overflow in the asf_mmst_streaming.c functionality of MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet.

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.

Buffer overflow vulnerability in hpsockd before version 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code.

Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.