Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0971 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://www.trustix.org/errata/2004/0050 - http://www.securityfocus.com/bid/11289 - http://www.gentoo.org/security/en/glsa/glsa-200410-24.xml - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?
id/11289 - http://www.gentoo.org/security/en/glsa/glsa-200410-24.xml - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136304 - http://www.redhat.com/support/errata/RHSA-2005-012.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10497 - https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
CVE ID: CVE-2004-0972 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10632 - http://www.trustix.org/errata/2004/0050 - http://bugzilla.redhat.
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A10632 - http://www.trustix.org/errata/2004/0050 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136308 - http://rhn.redhat.com/errata/RHBA-2004-232.html
CVE ID: CVE-2004-0973 State: REJECTED Published: 2004-10-20T04:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2004-0974 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://www.trustix.org/errata/2004/0050 - http://www.gentoo.org/security/en/glsa/glsa-200410-25.xml
CVE ID: CVE-2004-0975 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:39:00.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://www.trustix.org/errata/2004/0050 - https://oval.cisecurity.org/repository/search/definit
/vulnerabilities/17583 - http://www.trustix.org/errata/2004/0050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A164 - http://www.debian.org/security/2004/dsa-603 - http://www.redhat.com/support/errata/RHSA-2005-476.html - http://www.securityfocus.com/bid/11293 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10621 - http://secunia.com/advisories/12973
CVE ID: CVE-2004-0976 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:39:00.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-881.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://secunia.com/advisories/18075 - http://www.trustix.org/errata/2004/0050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef
/www.trustix.org/errata/2004/0050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9752 - http://www.debian.org/security/2004/dsa-620 - http://fedoranews.org/updates/FEDORA--.shtml - http://marc.info/?l=bugtraq&m=110547693019788&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:031 - http://secunia.com/advisories/17661 - http://www.securityfocus.com/bid/11294
CVE ID: CVE-2004-0977 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T00:38:59.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11295 - http://www.debian.org/security/2004/dsa-577 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11360 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://www.trust
/security/advisories?name=MDKSA-2004:149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 - http://www.trustix.org/errata/2004/0050 - http://security.gentoo.org/glsa/glsa-200410-16.xml - https://www.ubuntu.com/usn/usn-6-1/ - http://marc.info/?l=bugtraq&m=109910073808903&w=2 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300 - http://www.redhat.com/support/errata/RHSA-2004-489.html
CVE ID: CVE-2004-0978 State: PUBLISHED Published: 2004-10-21T04:00:00 Last Updated: 2024-08-08T00:39:00.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110616221411579&w=2 - http://www.kb.cert.org/vuls/id/673134 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://exchange.xforce.ibmcl
3134 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17714 - http://www.securityfocus.com/bid/11367 - http://www.ngssoftware.com/advisories/heartbeatfull.txt
CVE ID: CVE-2004-0979 State: PUBLISHED Published: 2004-10-21T04:00:00 Last Updated: 2024-08-08T00:39:00.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - h
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - http://www.kb.cert.org/vuls/id/630720
CVE ID: CVE-2004-0980 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:39:00.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18032 - http://www.debian.org/security/2004/dsa-592 - http://secunia.com/advisories/13167/ - http://www.securityfocus.com/bid/11657 - http://www.gentoo.org/security/en/glsa/glsa-200411-20.xml - http://www.mandriva.co
p://www.securityfocus.com/bid/11657 - http://www.gentoo.org/security/en/glsa/glsa-200411-20.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:129 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028590.html
CVE ID: CVE-2004-0981 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:39:00.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.org/bid/11548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17903 - http://secunia.com/advisories/12995/ - https://www.ubuntu.com/usn/usn-7-1/ - http://security.gentoo.org/glsa/glsa-200411-11.xml - http://www.imagemagick.org/www/Changelog.html - https://oval.cisecurity.org/repository/
oo.org/glsa/glsa-200411-11.xml - http://www.imagemagick.org/www/Changelog.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10472
CVE ID: CVE-2004-0982 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:39:00.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt - http://securitytracker.com/id?1011832 - http://secunia.com/advisories/12908 - http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml - http
.com/id?1011832 - http://secunia.com/advisories/12908 - http://www.gentoo.org/security/en/glsa/glsa-200410-27.xml - http://marc.info/?l=bugtraq&m=109834486312407&w=2 - http://www.osvdb.org/11023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17574 - http://www.securityfocus.com/bid/11468 - http://www.debian.org/security/2004/dsa-578
CVE ID: CVE-2004-0983 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:38:59.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-635.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:128 - http://www.securityfocus.com/bid/11618 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10268 - https://usn.ubuntu.com/20-1
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10268 - https://usn.ubuntu.com/20-1/ - http://www.debian.org/security/2004/dsa-586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17985
CVE ID: CVE-2004-0984 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T00:38:59.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://packages.debian.org/changelogs/pool/main/m/mailutils/mailutils_0.6-2/changelog
CVE ID: CVE-2004-0985 State: PUBLISHED Published: 2004-10-26T04:00:00 Last Updated: 2024-08-08T00:38:59.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109830296130857&w=2 - http://marc.info/?l=ntbugtraq&m=109828076802478&w=2 - https://exchange.xforce.ibmcloud.co
ugtraq&m=109830296130857&w=2 - http://marc.info/?l=ntbugtraq&m=109828076802478&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17824 - http://marc.info/?l=bugtraq&m=109829111200055&w=2
CVE ID: CVE-2004-0986 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:38:59.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11570 - https://bugzilla.fedora.us/show_bug.cgi?id=2252 - http://www.debian.org/security/2004/dsa-580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17928 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:12
ps://exchange.xforce.ibmcloud.com/vulnerabilities/17928 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:125 - http://www.ciac.org/ciac/bulletins/p-026.shtml - https://www.ubuntu.com/usn/usn-81-1/ - http://rpmfind.net/linux/RPM/suse/updates/9.2/i386/rpm/i586/iptables-1.2.11-4.2.i586.html
CVE ID: CVE-2004-0987 State: PUBLISHED Published: 2004-12-05T05:00:00 Last Updated: 2024-08-08T00:38:59.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278384 - http://www.debian.org/security/2004/dsa-598 - http://www.securityfocus.com/bid/11753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18270
CVE ID: CVE-2004-0988 State: PUBLISHED Published: 2004-10-28T04:00:00Z Last Updated: 2024-09-16T20:43:16.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (memory consumption) via certain inputs that cause a large memory operation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html
CVE ID: CVE-2004-0989 State: PUBLISHED Published: 2004-10-28T04:00:00 Last Updated: 2024-08-08T00:38:59.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost. Additional Analyst Notes: - CVE
ding (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html - http://marc.info/?l=bugtraq&m=109880813013482&w=2 - http://www.ciac.org/ciac/bulletins/p-029.shtml - http://www.osvdb.org/11179 - http://securitytracker.com/id?1011941 - http://www.redhat.com/support/errata/RHSA-2004-615.html - http://www.securityfocus.com/bid/11526 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17872 - http://www.redhat.com/support/errata/RHSA-2004-
f%3A10505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17872 - http://www.redhat.com/support/errata/RHSA-2004-650.html - http://www.gentoo.org/security/en/glsa/glsa-200411-05.xml - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890 - http://www.osvdb.org/11324 - http://www.novell.com/linux/security/advisories/2005_01_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1173 - https://www.ubuntu.com/usn/usn-89-1/ - http://secunia.com/advisories/13000 - http://www.debian.org/security/2004/dsa-582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17875 - http://w
change.xforce.ibmcloud.com/vulnerabilities/17870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17875 - http://www.osvdb.org/11180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17876
CVE ID: CVE-2004-0990 State: PUBLISHED Published: 2004-10-28T04:00:00 Last Updated: 2024-08-08T00:39:00.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-071.shtml - http://secunia.com/advisories/23783 - http://www.o
ainer: References: - http://www.ciac.org/ciac/bulletins/p-071.shtml - http://secunia.com/advisories/23783 - http://www.osvdb.org/11190 - http://secunia.com/advisories/21050 - http://www.securityfocus.com/bid/11523 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17866 - http://www.redhat.com/support/errata/RHSA-2004-638.html - http://www.debian.org/security/2004/dsa-602 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:113 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1260 - http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html - http://www.trustix.org/errata/2004/0058 - https://issues.rpath.com/browse/RPL-939 - h
rity-announce/2006-Feb/0001.html - http://www.trustix.org/errata/2004/0058 - https://issues.rpath.com/browse/RPL-939 - http://www.debian.org/security/2004/dsa-589 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:114 - http://www.debian.org/security/2004/dsa-601 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:132 - http://secunia.com/advisories/18717 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - https://www.ubuntu.com/usn/usn-25-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9952 - http://marc.info/?l=bugtraq&m=109882489302099&w=2 - https://www.ubuntu.com/usn/usn-11-1/ - http://secunia.com/advisories
http://marc.info/?l=bugtraq&m=109882489302099&w=2 - https://www.ubuntu.com/usn/usn-11-1/ - http://secunia.com/advisories/20824 - http://www.debian.org/security/2004/dsa-591 - http://secunia.com/advisories/20866
CVE ID: CVE-2004-0991 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:39:00.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13899 - http://security.gentoo.org/glsa/glsa-200501-14.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:009 - http://www.securityfocus.com/bid/12218 - http://secunia.com/advisories/13779 - http://secunia.com/advisories/13788
CVE ID: CVE-2004-0992 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:38:59.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17945 - http://www.gentoo.org/security/en/glsa/glsa-200411-07.xml - http://proxytunnel.sourceforge.net/news.html
CVE ID: CVE-2004-0993 State: PUBLISHED Published: 2004-12-10T05:00:00 Last Updated: 2024-08-08T00:38:59.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18359 - http://secunia.com/advisories/13371/ - http://www.securityfocus.com/bid/11800 - http://www.debian.org/security/2004/dsa-604
CVE ID: CVE-2004-0994 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:39:00.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=11029719840207
distinct. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110297198402077&w=2 - http://www.debian.org/security/2004/dsa-614 - http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff - https://exchange.xforce.ibmcloud.com/vulnerabilities/18454
CVE ID: CVE-2004-0995 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0996 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18125 - http://www.vupen.com/english/advisories/2007/2732 - http://www.securityfocus.com/archive/1/381611 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.securityfocus.com/archive/1/381443 - http://www.securityfocu
ives/security-announce//2007/Jul/msg00004.html - http://www.securityfocus.com/archive/1/381443 - http://www.securityfocus.com/bid/11697 - http://www.debian.org/security/2004/dsa-610 - http://marc.info/?l=bugtraq&m=110133485519690&w=2 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/archive/1/381506 - http://www.securityfocus.com/bid/25159 - http://www.gentoo.org/security/en/glsa/glsa-200412-11.xml - http://secunia.com/advisories/26235