Archive
8 February 2005
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Unscored —CVE-2004-0848 EPSS 27%
Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file loc…
-
Unscored —
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitra…
-
Unscored —
Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a d…
-
Unscored —CVE-2004-1244 EPSS 33%
Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (…
-
Unscored —
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in…
-
Unscored —
The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote…
-
Unscored —
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and…
-
Unscored —
Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq vari…
-
Unscored —
Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags ke…
-
Unscored —
The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packa…
-
Unscored —
The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (han…
-
Unscored —
Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentat…
-
Unscored —
Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of…
-
Unscored —
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate …
-
Unscored —
Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code vi…
-
Unscored —CVE-2005-0057 EPSS 41%
The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2005-0050 EPSS 47%
The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly valid…
-
Unscored —CVE-2005-0249 EPSS 19%
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbi…
-
Unscored —
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via …
-
Unscored —
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large nu…
-
Unscored —
Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plu…
-
Unscored —CVE-2005-0054 EPSS 24%
Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitr…
-
Unscored —
Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, whic…
-
Unscored —CVE-2005-0047 Public exploit
Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage fil…
-
Unscored —CVE-2005-0056 EPSS 28%
Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, wh…
-
Unscored —CVE-2005-0044 EPSS 33%
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly val…
-
Unscored —
The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via cr…
-
Unscored —
Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmac…
-
Unscored —CVE-2005-0049 EPSS 20%
Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP red…
-
Unscored —CVE-2005-0055 EPSS 37%
Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the…
-
Unscored —
The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for passw…
-
Unscored —CVE-2005-0241 EPSS 70%
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context…
-
Unscored —
PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREAT…
-
Unscored —CVE-2005-0051 EPSS 47%
The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (user…
-
Unscored —
Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the …
-
Unscored —
Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impa…
-
Unscored —
The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite t…
-
Unscored —
Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption).
-
Unscored —
Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8…
-
Unscored —
Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by S…