Archive
December 2004
Vulnerabilities first published in this month (UTC), newest first.
245 results · Feed
-
Unscored —
Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text fi…
-
Unscored —
Buffer overflow in the process_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary…
-
Unscored —
Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbit…
-
Unscored —CVE-2004-1261 Public exploit
Multiple buffer overflows in the preparse function in asp2php 0.76.23 allow remote attackers to execute arbitrary code …
-
Unscored —
The Smc.exe process in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before in…
-
Unscored —CVE-2004-1298 Public exploit
Buffer overflow in the parse function in vb2c.c for vb2c 0.02 allows remote attackers to execute arbitrary code via a c…
-
Unscored —
lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lp…
-
Unscored —
Buffer overflow in the save_embedded_address function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers…
-
Unscored —
Buffer overflow in the DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary cod…
-
Unscored —
Buffer overflow in the put_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary cod…
-
Unscored —
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted mode…
-
Unscored —
The DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file co…
-
Unscored —
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-…
-
Unscored —
Buffer overflow in the remove_quote function in convert.c for html2hdml 1.0.3 allows remote attackers to execute arbitr…
-
Unscored —CVE-2004-1308 EPSS 15%
Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute…
-
Unscored —CVE-2004-1259 Public exploit
Multiple buffer overflows in the handle_directive function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute…
-
Unscored —CVE-2004-0899 EPSS 73%
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, doe…
-
Unscored —CVE-2004-0901 EPSS 32%
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data le…
-
Unscored —CVE-2004-0900 EPSS 26%
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the …
-
Unscored —CVE-2004-0571 EPSS 31%
Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers…
-
Unscored —
The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Window…
-
Unscored —
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple i…
-
Unscored —CVE-2004-0568 EPSS 35%
HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly valid…
-
Unscored —CVE-2004-0894 Public exploit
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly val…
-
Unscored —
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with lar…
-
Unscored —CVE-2004-1016 Public exploit
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users t…
-
Unscored —
SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that …
-
Unscored —CVE-2004-1217 Public exploit
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories b…
-
Unscored —
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local a…
-
Unscored —CVE-2004-1214 Public exploit
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format spec…
-
Unscored —
Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windo…
-
Unscored —
Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users…
-
Unscored —
Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes en…
-
Unscored —CVE-2004-1227 Public exploit
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary …
-
Unscored —
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files …
-
Unscored —
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers t…
-
Unscored —CVE-2004-1216 Public exploit
The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server f…
-
Unscored —
The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attacke…
-
Unscored —CVE-2004-1206 Public exploit
Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrar…
-
Unscored —
Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exh…