Skip to content
OpenAdvisories

Archive

December 2004

Vulnerabilities first published in this month (UTC), newest first.

  1. 146
  2. 2 
  3. 3 
  4. 4 
  5. 58
  6. 6 
  7. 7 
  8. 813
  9. 9 
  10. 1021
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1561
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2272
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 3124

245 results · Feed

  • Unscored —

    Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of se…

  • Unscored —

    Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitr…

  • Unscored —
    CVE-2004-1282 Public exploit

    Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2004-1267 Public exploit

    Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote atta…

  • Unscored —

    Buffer overflow in the process_abc function in abc.c for abc2mtex 1.6.1 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2004-1289 Public exploit EPSS 15%

    Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for …

  • Unscored —

    Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execu…

  • Unscored —

    Stack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows remote attackers to ex…

  • Unscored —
    CVE-2004-1284 Public exploit EPSS 14%

    Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitr…

  • Unscored —

    The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses…

  • Unscored —
    CVE-2004-1288 Public exploit EPSS 10%

    Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary co…

  • Unscored —

    Buffer overflow in the get_file_list_stdin function in jpegtoavi 1.5 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2004-1303 Public exploit

    Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code…

  • Unscored —
    CVE-2004-1291 Public exploit

    Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, …

  • Unscored —
    CVE-2004-1172 Public exploit EPSS 82%

    Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before …

  • Unscored —

    The gui_popup_view_fly function in gui_tview_popup.c for junkie 0.3.1 allows remote malicious FTP servers to execute ar…

  • Unscored —
    CVE-2004-1065 EPSS 10%

    Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to …

  • Unscored —

    Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target wind…

  • Unscored —

    Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use t…

  • Unscored —
    CVE-2004-1264 Public exploit

    Buffer overflow in the simplify_path function in config.c for ChBg 1.5 allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2004-1301 Public exploit

    Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbit…

  • Unscored —

    Buffer overflow in the Mesh::type method in mesh.c for the mview program in Mesh Viewer 0.2.2 allows remote attackers t…

  • Unscored —

    Buffer overflow in the switch_voice function in parse.c for jcabc2ps 20040902 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2004-1287 Public exploit EPSS 18%

    Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via …

  • Unscored —
    CVE-2004-1286 Public exploit EPSS 12%

    Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows r…

  • Unscored —
    CVE-2004-1154 EPSS 13%

    Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to c…

  • Unscored —

    IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being upload…

  • Unscored —

    Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions…

  • Unscored —
    CVE-2004-1260 Public exploit EPSS 11%

    Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abc…

  • Unscored —

    Buffer overflow in the get_field_headers function in csv2xml.cpp for csv2xml 0.5.1 allows remote attackers to execute a…

  • Unscored —
    CVE-2004-1256 Public exploit EPSS 10%

    Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote at…

  • Unscored —

    The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does …

  • Unscored —

    Buffer overflow in the bsb_open_header function in libbsb for bsb2ppm 0.0.6 allows remote attackers to execute arbitrar…

  • Unscored —

    The slip_down function in slip.c for the uml_net program in uml-utilities 20030903, when uml_net is installed setuid ro…

  • Unscored —
    CVE-2004-1292 Public exploit EPSS 16%

    Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to exec…

  • Unscored —

    Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remot…

  • Unscored —
    CVE-2004-1269 Public exploit

    lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing t…

  • Unscored —
    CVE-2004-1304 Public exploit EPSS 11%

    Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary co…

  • Unscored —

    Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute …

  • Unscored —

    Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attacke…