CVE Vulnerability Catalog

tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets.

Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS versions 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code.

Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in versions 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.

Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic.

Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line.

The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial numbers of certificates, which can lead to incorrect acceptance of signatures if the certificate chain is trusted by OpenCA.

Buffer overflow in a component of Microsoft Data Access Components (MDAC) versions 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.

Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.

Buffer overflow in DameWare Mini Remote Control before version 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129.

An unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions.

The vulnerability in Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses. A remote attacker can bypass authentication by connecting from the same IP address as an active authenticated user.

Unknown vulnerability in SandSurfer before version 1.7.0 allows remote attackers to gain access as a logged-in user.

Vulnerability in Windows Media Player 9 allows remote attackers to execute arbitrary code via a specially crafted PNG file with large width or height values, known as the 'PNG Processing Vulnerability'.

Vulnerability in Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command.

Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in the download feature.

Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.

The calendar module for phpgroupware 0.9.14 does not enforce the 'save extension' feature for holiday files, allowing remote attackers to create and execute PHP files.

vbox3 version 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, allowing local users to gain elevated privileges.

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions through various methods, such as using the NavigateAndFind method or window.open to load a JavaScript URL.

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by modifying the createTextRange or createRange method. Exploitation of these vulnerabilities may lead to unauthorized access to data.