CVE Vulnerability Catalog

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages with malformed quoting in MIME headers, parameters, and values.

A stack-based buffer overflow in the xpm_extract_color function (io-xpm.c) of the XPM image decoder in gtk+ 2.4.4 and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a crafted color string.

A buffer overflow vulnerability in WIDCOMM Bluetooth Connectivity Software, used in products such as BTStackServer 1.3.2.7 and 1.4.2.10, Windows XP and Windows 98 with MSI Bluetooth Dongles, and HP IPAQ 5450 running WinCE 3.0, allows remote attackers to execute arbitrary code via specially crafted service requests.

An integer overflow in Gaim before version 0.82 in the size variable of Groupware server messages allows remote attackers to cause a denial of service and possibly execute arbitrary code.

In redhat-config-nfs before version 1.0.13, an unknown vulnerability when shares are exported to multiple hosts can cause incorrect permissions and prevent the all_squash option from being applied.

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

The calendar program in bsdmainutils versions 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, allowing attackers to execute arbitrary commands via a calendar event file.

Vulnerability in DB2 8.1 allows local users to escalate privileges via the remote command server (DB2RCMD.EXE), which executes the db2rcmdc.exe program as the db2admin administrator. Attackers can exploit the DB2REMOTECMD named pipe to gain control.

A format string vulnerability in the auth_debug function in Courier-IMAP versions 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as uuencode, mac-binhex40, and yenc.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.

Multiple stack-based buffer overflows were found in libXpm before version 6.8.1 in functions xpmParseColors, ParseAndPutPixels, and ParsePixels. A remote attacker can exploit a specially crafted XPM image file to execute arbitrary code.

Multiple integer overflows in libXpm before version 6.8.1 in functions xpmParseColors, XpmCreateImageFromXpmImage, CreateXImage, ParsePixels, and ParseAndPutPixels may allow remote attackers to execute arbitrary code via a malformed XPM image file.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters or incorrectly use standard separators within MIME headers, fields, parameters, or values.

Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname.

The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.