Total
12268 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-2503 | 1 Sourceforge | 1 Emule X-ray | 2025-04-09 | 9.3 HIGH | N/A |
Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors. | |||||
CVE-2007-3743 | 1 Apple | 1 Safari | 2025-04-09 | 6.8 MEDIUM | N/A |
Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a bookmark with a long title. | |||||
CVE-2008-3915 | 1 Linux | 1 Linux Kernel | 2025-04-09 | 9.3 HIGH | N/A |
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl. | |||||
CVE-2007-4217 | 1 Ibm | 1 Aix | 2025-04-09 | 7.2 HIGH | N/A |
Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by executing a macro via the '$' command. | |||||
CVE-2007-5323 | 1 Emc | 1 Replistor | 2025-04-09 | 10.0 HIGH | N/A |
The RepliStor Server Service in EMC Replistor 6.1.3 allows remote attackers to execute arbitrary code via a size value that causes RepliStor to create a smaller buffer than expected, which triggers a buffer overflow when that buffer is used in a recv function call. | |||||
CVE-2009-1943 | 1 Safenet-inc | 2 Softremote, Softremote1.4 | 2025-04-09 | 10.0 HIGH | N/A |
Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514. | |||||
CVE-2008-1964 | 1 Xinehq | 1 Xine Lib | 2025-04-09 | 7.5 HIGH | N/A |
Stack-based buffer overflow in the demux_nsf_send_headers function in src/demuxers/demux_nsf.c in xine-lib allows remote attackers to have an unknown impact via a long copyright field in an NSF header in an NES Sound file, a different issue than CVE-2008-1878. NOTE: a third party claims that the copyright field always has a safe length | |||||
CVE-2007-4803 | 1 Atomix Productions | 1 Atomixmp3 | 2025-04-09 | 6.8 MEDIUM | N/A |
Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the (1) File1 and (2) Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487. | |||||
CVE-2009-2496 | 1 Microsoft | 5 Biztalk Server, Internet Security And Acceleration Server, Office and 2 more | 2025-04-09 | 9.3 HIGH | N/A |
Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption Vulnerability." | |||||
CVE-2006-6400 | 1 Justsystem | 6 Hanako, Hanako Viewer, Ichitaro and 3 more | 2025-04-09 | 6.8 MEDIUM | N/A |
Buffer overflow in JustSystems Hanako 2004 through 2006, Hanako viewer 1.x, Ichitaro 2004, Ichitaro 2005, Ichitaro Lite2, Ichitaro viewer 4.x, and Sanshiro 2005 allows remote attackers to execute arbitrary code via the (1) Keyword and (2) Title fields, related to string length fields. | |||||
CVE-2007-0790 | 1 Smartftp | 1 Smartftp | 2025-04-09 | 7.5 HIGH | N/A |
Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner. | |||||
CVE-2009-0544 | 1 Pycrypto | 1 Arc2 | 2025-04-09 | 10.0 HIGH | N/A |
Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length. | |||||
CVE-2009-0909 | 1 Vmware | 4 Ace, Player, Server and 1 more | 2025-04-09 | 9.3 HIGH | N/A |
Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-435. | |||||
CVE-2008-0698 | 1 Ibm | 1 Db2 | 2025-04-09 | 7.8 HIGH | N/A |
Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access." | |||||
CVE-2009-3700 | 1 Squidguard | 1 Squidguard | 2025-04-09 | 5.0 MEDIUM | N/A |
Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode." | |||||
CVE-2009-0119 | 1 Microsoft | 1 Windows Xp | 2025-04-09 | 10.0 HIGH | N/A |
Buffer overflow in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .chm file. | |||||
CVE-2007-5911 | 1 Viewpoint | 1 Media Player | 2025-04-09 | 6.8 MEDIUM | N/A |
Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the (1) BroadcastKey, (2) BroadcastKeyFileURL, (3) Component, (4) ComponentClassID, (5) ComponentFileName, (6) ExtraProperty, (7) Properties, (8) RequiredVersions, (9) Source, or (10) XMLText method. | |||||
CVE-2008-6363 | 1 Capilano | 1 Designworks | 2025-04-09 | 9.3 HIGH | N/A |
Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary code via a crafted .cct file. NOTE: some of these details are obtained from third party information. | |||||
CVE-2009-1059 | 1 Powerzip | 1 Powerzip | 2025-04-09 | 9.3 HIGH | N/A |
Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product. | |||||
CVE-2007-3375 | 1 Lhaca | 1 File Archiver | 2025-04-09 | 6.8 MEDIUM | N/A |
Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper. |