Total
11965 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2007-3925 | 1 Ipswitch | 2 Imail Server, Ipswitch Collaboration Suite | 2017-07-29 | 6.5 MEDIUM | N/A |
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command. | |||||
CVE-2007-3743 | 1 Apple | 1 Safari | 2017-07-29 | 6.8 MEDIUM | N/A |
Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a bookmark with a long title. | |||||
CVE-2007-4515 | 1 Yahoo | 1 Messenger | 2017-07-29 | 9.3 HIGH | N/A |
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information. | |||||
CVE-2007-4345 | 1 Ipswitch | 2 Imail Client, Imail Server | 2017-07-29 | 7.5 HIGH | N/A |
Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message. | |||||
CVE-2007-3928 | 1 Yahoo | 1 Messenger | 2017-07-29 | 7.6 HIGH | N/A |
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638. | |||||
CVE-2007-3454 | 1 Trend Micro | 1 Officescan | 2017-07-29 | 10.0 HIGH | N/A |
Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to execute arbitrary code via long crafted requests, as demonstrated using a long session cookie to unspecified CGI programs that use this library. | |||||
CVE-2007-4472 | 1 Broderbund | 1 Expressit 3dgreetings Player | 2017-07-29 | 9.3 HIGH | N/A |
Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary code via unspecified vectors. | |||||
CVE-2007-3373 | 1 Redhat | 1 Cluster Suite | 2017-07-29 | 5.0 MEDIUM | N/A |
daemon.c in cman (redhat-cluster-suite) before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests. | |||||
CVE-2007-3333 | 1 Ibm | 1 Aix | 2017-07-29 | 6.9 MEDIUM | N/A |
Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code via a large number of terminal control sequences. | |||||
CVE-2007-4473 | 1 Gesytec Easylon | 1 Opc Server | 2017-07-29 | 10.0 HIGH | N/A |
Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions. | |||||
CVE-2007-3551 | 1 Bbs100 | 1 Bbs100 | 2017-07-29 | 6.1 MEDIUM | N/A |
Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service (crash) by attempting to login as the Guest user when another Guest user is already logged in, possibly related to the state_login_prompt function in state_login.c. | |||||
CVE-2007-4217 | 1 Ibm | 1 Aix | 2017-07-29 | 7.2 HIGH | N/A |
Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by executing a macro via the '$' command. | |||||
CVE-2007-3832 | 1 Cerulean Studios | 1 Trillian | 2017-07-29 | 9.3 HIGH | N/A |
Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///#1111111/ substring. | |||||
CVE-2007-4343 | 1 Irfanview | 1 Irfanview | 2017-07-29 | 5.1 MEDIUM | N/A |
Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code via a crafted palette (.pal) file. | |||||
CVE-2007-3510 | 1 Ibm | 1 Lotus Domino | 2017-07-29 | 9.0 HIGH | N/A |
Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name. | |||||
CVE-2007-4222 | 1 Ibm | 1 Lotus Notes | 2017-07-29 | 9.3 HIGH | N/A |
Buffer overflow in the TagAttributeListCopy function in nnotes.dll in IBM Lotus Notes before 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML email, related to duplicate RTF conversion when the recipient operates on this email. | |||||
CVE-2007-3375 | 1 Lhaca | 1 File Archiver | 2017-07-29 | 6.8 MEDIUM | N/A |
Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper. | |||||
CVE-2007-4466 | 1 Electronic Arts | 1 Snoopyctrl | 2017-07-29 | 6.8 MEDIUM | N/A |
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters. | |||||
CVE-2007-4470 | 1 Er Mapper | 1 Image Web Server Ecw Jpeg 2000 Plug-in | 2017-07-29 | 9.3 HIGH | N/A |
Multiple stack-based buffer overflows in the Earth Resource Mapping NCSView ActiveX control before 3.4.0.242 in NCSView.dll, as distributed in ER Mapper ECW JPEG 2000 Plug-in before 8.1, allow remote attackers to execute arbitrary code via unspecified vectors. | |||||
CVE-2007-3678 | 1 Quark | 1 Quarkxpress | 2017-07-29 | 7.6 HIGH | N/A |
Stack-based buffer overflow in the MSWord text-import extension (Word 6-2000 Filter.xnt) in QuarkXPress 7.2 for Windows, when using the Rectangle Text Box tool for importing text, allows user-assisted remote attackers to execute arbitrary code via a long font name. |