CVE Vulnerability Catalog

Adobe Reader 6.0 improperly handles null characters when splitting a filename path into components, allowing a remote attacker to execute arbitrary code via a file with a long extension not normally handled by Reader, triggering a buffer overflow.

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.

Vulnerability in Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the 'page' parameter.

The vulnerability in Safari 1.2.2 allows a frame from one domain to inject content into a frame belonging to another domain. This issue, known as the frame injection vulnerability, can be exploited for website spoofing and other attacks.

Vulnerability in Sun Java System Portal Server 6.2 allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.

The vulnerability in Internet Explorer for Mac 5.2.3 and Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain. This facilitates web site spoofing and other attacks, known as the frame injection vulnerability.

A format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers directly provided to the OutputDebugString function call.

Konqueror versions 3.1.3, 3.2.2, and possibly others do not properly prevent a frame in one domain from injecting content into a frame belonging to another domain, enabling web site spoofing and other attacks, known as the frame injection vulnerability.

Buffer overflow in Medal of Honor: Allied Assault 1.11v9 and earlier, Breakthrough 2.40b and earlier, and Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as the getinfo query, the connect packet, and other unknown vectors.

A double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause an application crash via a malformed GIF image.

PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the site parameter.

Integer overflow in the ip_setsockopt function in Linux kernel versions 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.

Unknown vulnerability in libtasn1 in versions 0.1.x before 0.1.2 and 0.2.x before 0.2.7, related to DER parsing functions.

In Subversion versions 1.0.2 and earlier, a stack-based buffer overflow during apr_time_t data conversion allows remote attackers to execute arbitrary code.

A stack-based buffer overflow exists in Exim 3.35 and earlier versions when the sender_verify option is true. This allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.

The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter '-' characters that begin a hostname in telnet, rlogin, ssh, or mailto URIs. This allows remote attackers to manipulate the options passed to associated programs, potentially leading to reading arbitrary files or executing arbitrary code.

A stack-based buffer overflow exists in Exim 4 before version 4.33 when the headers_check_syntax option is enabled. This allows remote attackers to cause a denial of service and potentially execute arbitrary code during the header check.

A heap-based buffer overflow exists in the date parsing function ne_rfc1036_parse in the neon library (libneon) version 0.24.5 and earlier. This allows remote WebDAV servers to execute arbitrary code on the client when used by cadaver before version 0.22.

Vulnerability in BEA WebLogic Server and WebLogic Express versions 7.0 through SP5 and 8.1 through SP2. When editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, if the weblogic.xml does not have a principal-name tag, the security-role-assignment tags are inadvertently removed. This can remove intended access restrictions for the associated web application.