deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3579
Published: 2005-11-16
Description: ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the querystring.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/179; http://securitytracker.com/id?1015204; http://www.securityfocus.com/archive/1/416581/30/0/threaded
CVE: CVE-2005-3580
Published: 2005-11-16
Description: QDBM before 1.8.33-r2 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/17427/; http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml; http://www.osvdb.org/20527
CVE: CVE-2005-3581
Published: 2005-11-16
Description: GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/17427/; http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml; http://www.osvdb.org/20529
CVE: CVE-2005-3582
Published: 2005-11-16
Description: ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/17427/; http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml; http://www.osvdb.org/20528
CVE: CVE-2005-3583
Published: 2005-11-16
Description: (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss.
CVSS Score: 7.8 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1878&w=2; http://secunia.com/advisories/17478/; http://securityreason.com/securityalert/143
CVE: CVE-2005-3584
Published: 2005-11-16
Description: Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1383&w=2; http://www.securityfocus.com/bid/15276; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1383&w=2
CVE: CVE-2005-3585
Published: 2005-11-16
Description: SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter.
CVSS Score: 7.5 (HIGH)
References: http://glide.stanford.edu/yichen/research/sec.pdf; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1383&w=2; http://secunia.com/advisories/17410/
CVE: CVE-2005-3586
Published: 2005-11-16
Description: content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error.
CVSS Score: 5.0 (MEDIUM)
References: http://irannetjob.com/content/view/153/28/; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2404&w=2; http://irannetjob.com/content/view/153/28/
CVE: CVE-2005-3587
Published: 2005-11-16
Description: Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=368319; http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml; http://www.mandriva.com/security/advisories?name=MDKSA-2005:205
CVE: CVE-2005-3588
Published: 2005-11-16
Description: SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the username field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1756&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5918&w=2; http://www.osvdb.org/20952
CVE: CVE-2005-3589
Published: 2005-11-16
Description: Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.
CVSS Score: 7.8 (HIGH)
References: http://ingehenriksen.blogspot.com/2005/11/filezilla-server-terminal-094d-dos-poc_21.html; http://ingehenriksen.blogspot.com/2005/11/work-in-progress-filezilla-server.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1377&w=2
CVE: CVE-2005-3591
Published: 2005-11-16
Description: Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via parameters to the ActionDefineFunction ActionScript call in a SWF file, which causes an improper memory access condition, a different vulnerability than CVE-2005-2628.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4670&w=2; http://secunia.com/advisories/17430/; http://secunia.com/advisories/17437/
CVE: CVE-2005-3592
Published: 2005-11-16
Description: index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the application by triggering an error message, such as by entering multiple ../ (dot dot slash) in the archive parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9880&w=2; http://www.securityinfo.ru/2005/11/____cutenews_140.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9880&w=2
CVE: CVE-2005-3594
Published: 2005-11-16
Description: game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, $player_score, and $game_name variables.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4568&w=2; http://securityreason.com/securityalert/158; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4568&w=2
CVE: CVE-2005-3595
Published: 2005-11-16
Description: By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8113&w=2; http://www.microsoft.com/windowsxp/using/setup/getstarted/installqa.mspx; http://www.securityfocus.com/archive/1/375335
CVE: CVE-2005-3596
Published: 2005-11-16
Description: SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1594&w=2; http://osvdb.org/20712; http://secunia.com/advisories/17517/
CVE: CVE-2005-3621
Published: 2005-11-16
Description: CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17578; http://secunia.com/advisories/22781; http://securitytracker.com/id?1015213
CVE: CVE-2005-3622
Published: 2005-11-16
Description: phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4035&w=2; http://securityreason.com/securityalert/185; http://securitytracker.com/id?1015213
CVE: CVE-2005-3633
Published: 2005-11-16
Description: HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8932&w=2; http://secunia.com/advisories/17515/; http://securityreason.com/securityalert/164
CVE: CVE-2005-3634
Published: 2005-11-16
Description: frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6667&w=2; http://secunia.com/advisories/17515/; http://securityreason.com/securityalert/163
CVE: CVE-2005-3635
Published: 2005-11-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5542&w=2; http://secunia.com/advisories/17515/; http://securityreason.com/securityalert/162
CVE: CVE-2005-3636
Published: 2005-11-16
Description: Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5542&w=2; http://secunia.com/advisories/17515/; http://securityreason.com/securityalert/162
CVE: CVE-2005-3637
Published: 2005-11-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3530.  Reason: This candidate is a duplicate of CVE-2005-3530.  Notes: All CVE users should reference CVE-2005-3530 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3638
Published: 2005-11-16
Description: Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in profile.php and (2) titles of posts.
CVSS Score: 4.3 (MEDIUM)
References: http://irannetjob.com/content/view/162/28/; http://secunia.com/advisories/17569; http://securitytracker.com/id?1015207
CVE: CVE-2005-3639
Published: 2005-11-16
Description: PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17580; http://www.securityfocus.com/bid/15404; http://www.vupen.com/english/advisories/2005/2451
CVE: CVE-2005-3640
Published: 2005-11-16
Description: Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html; http://secunia.com/advisories/17609; http://www.lucaercoli.it/advs/FTGate4.txt
CVE: CVE-2005-3641
Published: 2005-11-16
Description: Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
CVSS Score: 7.5 (HIGH)
References: http://www.ngssoftware.com/papers/database-on-xp.pdf; http://www.securityfocus.com/bid/15450; http://www.ngssoftware.com/papers/database-on-xp.pdf
CVE: CVE-2005-3642
Published: 2005-11-16
Description: IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username.
CVSS Score: 7.5 (HIGH)
References: http://www.ngssoftware.com/papers/database-on-xp.pdf; http://www.securityfocus.com/bid/15451; http://www.ngssoftware.com/papers/database-on-xp.pdf
CVE: CVE-2005-3643
Published: 2005-11-16
Description: IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password.
CVSS Score: 7.5 (HIGH)
References: http://www.ngssoftware.com/papers/database-on-xp.pdf; http://www.securityfocus.com/bid/15452; http://www.ngssoftware.com/papers/database-on-xp.pdf
CVE: CVE-2005-3644
Published: 2005-11-17
Description: PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://research.eeye.com/html/alerts/zeroday/20051116.html; http://secunia.com/advisories/17595; http://securitytracker.com/id?1015233
CVE: CVE-2005-3645
Published: 2005-11-17
Description: phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5035&w=2; http://seclists.org/lists/bugtraq/2005/Nov/0189.html; http://secunia.com/advisories/17464/
CVE: CVE-2005-3646
Published: 2005-11-17
Description: Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5035&w=2; http://seclists.org/lists/bugtraq/2005/Nov/0189.html; http://secunia.com/advisories/17464/
CVE: CVE-2005-3647
Published: 2005-11-17
Description: Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9948&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/23054; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9948&w=2
CVE: CVE-2005-3648
Published: 2005-11-17
Description: Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4241&w=2; http://osvdb.org/20748; http://rgod.altervista.org/moodle16dev.html
CVE: CVE-2005-3649
Published: 2005-11-17
Description: jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4241&w=2; http://rgod.altervista.org/moodle16dev.html; http://secunia.com/advisories/17526/
CVE: CVE-2005-3650
Published: 2005-11-17
Description: The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows remote attackers to execute arbitrary code by calling vulnerable functions such as RebootMachine, IsAdministrator, and ExecuteCode.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://hack.fi/~muzzy/sony-drm/; http://secunia.com/advisories/17610; http://www.freedom-to-tinker.com/?p=927
CVE: CVE-2005-3189
Published: 2005-11-18
Description: Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via ".." sequences in the SELECT command.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17640; http://securityreason.com/securityalert/192; http://securitytracker.com/id?1015236
CVE: CVE-2005-3347
Published: 2005-11-18
Description: Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) sensor_program parameter or the (2) _SERVER[HTTP_ACCEPT_LANGUAGE] parameter, which overwrites an internal variable, a variant of CVE-2003-0536.  NOTE: due to a typo in an advisory, an issue in osh was inadvertently linked to this identifier; the proper identifier for the osh issue is CVE-2005-3346.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/17441; http://secunia.com/advisories/17570; http://secunia.com/advisories/17584
CVE: CVE-2005-3348
Published: 2005-11-18
Description: HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/17441; http://secunia.com/advisories/17570; http://secunia.com/advisories/17584
CVE: CVE-2005-3662
Published: 2005-11-18
Description: Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U; http://secunia.com/advisories/17544; http://secunia.com/advisories/17671
CVE: CVE-2005-1925
Published: 2005-11-18
Description: Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suck_url parameter to tiki-editpage.php or (2) language parameter to tiki-user_preferences.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://securitytracker.com/id?1015190; http://www.idefense.com/application/poi/display?id=335&type=vulnerabilities; http://www.idefense.com/application/poi/display?id=337&type=vulnerabilities
CVE: CVE-2005-2929
Published: 2005-11-18
Description: Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.55/SCOSA-2005.55.txt; http://secunia.com/advisories/17372
CVE: CVE-2005-2936
Published: 2005-11-18
Description: Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might allow local users to gain privileges via a malicious C:\program.exe file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/19358; http://securitytracker.com/id?1015223; http://service.real.com/help/faq/security/security111605.html
CVE: CVE-2005-2938
Published: 2005-11-18
Description: Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://securitytracker.com/id?1015222; http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities; http://www.vupen.com/english/advisories/2005/2443
CVE: CVE-2005-2939
Published: 2005-11-18
Description: Unquoted Windows search path vulnerability in VMWare Workstation 5.0.0 build-13124 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1015225; http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities; http://www.securityfocus.com/bid/15448
CVE: CVE-2005-2940
Published: 2005-11-18
Description: Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the programs (1) GIANTAntiSpywareMain.exe, (2) gcASNotice.exe, (3) gcasServ.exe, (4) gcasSWUpdater.exe, or (5) GIANTAntiSpywareUpdater.exe.  NOTE: it is not clear whether this overlaps CVE-2005-2935.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1015226; http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities; http://www.securityfocus.com/bid/15448
CVE: CVE-2005-2975
Published: 2005-11-18
Description: io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/17522; http://secunia.com/advisories/17538; http://secunia.com/advisories/17562
CVE: CVE-2005-2976
Published: 2005-11-18
Description: Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://secunia.com/advisories/17522; http://secunia.com/advisories/17538; http://secunia.com/advisories/17562
CVE: CVE-2005-3116
Published: 2005-11-18
Description: Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17503; http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html; http://securitytracker.com/id?1015170
CVE: CVE-2005-3186
Published: 2005-11-18
Description: Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.8/SCOSA-2006.8.txt; http://secunia.com/advisories/17522; http://secunia.com/advisories/17538
CVE: CVE-2005-3663
Published: 2005-11-18
Description: Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder.
CVSS Score: 7.2 (HIGH)
References: http://securityreason.com/securityalert/187; http://securitytracker.com/id?1015224; http://www.idefense.com/application/poi/display?id=340&type=vulnerabilities
CVE: CVE-2005-3664
Published: 2005-11-18
Description: Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17130; http://secunia.com/advisories/17144; http://www.idefense.com/application/poi/display?id=318&type=vulnerabilities