Browse CVEs

MEDIUM 6.8 CVE-2006-7228 Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code vi… Pcre after 6.6 Fix from $1,6002007-11-14 HIGH 7.5 CVE-2007-4766 Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a denial of ser… Pcre after 7.3 Fix from $1,9502007-11-07 HIGH 7.1 CVE-2007-4997 Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cau… Linux Kernel after 2.6.22.7 Fix from $1,9502007-11-06 HIGH 7.2 CVE-2007-4622 Integer underflow in the dns_name_fromtext function in (1) libdns_nonsecure.a and (2) libdns_secure.a in IBM AIX 5.2 allows local users to gain privi… Aix Patch available Fix from $1,9502007-11-05 HIGH 9.3 CVE-2007-2957EPSS 6% Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute… E Business Server after 8.5.2 Fix from $1,9502007-10-31 HIGH 10.0 CVE-2007-4351EPSS 7% Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1)… Cups after 1.3.3 Fix from $1,9502007-10-31 HIGH 9.3 CVE-2007-5080EPSS 8% Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute a… Realone Player Patch available Fix from $1,9502007-10-31 HIGH 7.5 CVE-2007-5713 Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or cause a de… Amx Mod X Patch available Fix from $1,9502007-10-30 HIGH 9.3 CVE-2007-5552 Integer overflow in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: as of 20071016, the only disclosure i… iOS No fix yet Fix from $1,9502007-10-18 HIGH 7.8 CVE-2007-5558 Integer overflow in the LG Mobile handset allows remote attackers to cause a denial of service (reboot) via a crafted HTTP packet. NOTE: as of 20071… Lg Mobile Handset No fix yet Fix from $1,9502007-10-18 HIGH 10.0 CVE-2007-5467EPSS 14% Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long… Extremail after 2.1.1 Fix from $1,9502007-10-15 HIGH 9.3 CVE-2007-4619EPSS 7% Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assi… Libflac after 5.35 Fix from $1,9502007-10-12 MEDIUM 6.8 CVE-2007-5416 Drupal 5.2 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric param… Drupal after 5.2 Fix from $1,6002007-10-12 MEDIUM 5.0 CVE-2007-5369 The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service (… World In Conflict Patch available Fix from $1,6002007-10-11 MEDIUM 5.0 CVE-2007-5300 Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attacker… Wzdftpd No fix yet Fix from $1,6002007-10-09 MEDIUM 6.8 CVE-2007-4568 Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code v… X Font Server Patch available Fix from $1,6002007-10-05 HIGH 7.5 CVE-2007-4990EPSS 11% The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps… X Font Server after 1.0.4 Fix from $1,9502007-10-05 HIGH 9.3 CVE-2007-5004EPSS 9% Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execu… Brightstor Arcserve Backup Laptops Desktops Patch available Fix from $1,9502007-10-01 HIGH 7.1 CVE-2007-5133EPSS 23% Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file… Windows 2003 Server No fix yet Fix from $1,9502007-09-27 MEDIUM 6.8 CVE-2007-4986 Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib… Imagemagick Patch available Fix from $1,6002007-09-24 HIGH 9.3 CVE-2007-4987 Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code … Imagemagick Patch available Fix from $1,9502007-09-24 HIGH 10.0 CVE-2007-0062EPSS 8% Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 a… Ace Patch available Fix from $1,9502007-09-21 MEDIUM 5.0 CVE-2007-5029 Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over… Dibbler Patch available Fix from $1,6002007-09-21 MEDIUM 5.0 CVE-2007-5030 Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with la… Dibbler Patch available Fix from $1,6002007-09-21 HIGH 9.3 CVE-2007-4940 Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormPlayer 1.0… Media Player Classic after 6.4.9.0 Fix from $1,9502007-09-18 MEDIUM 6.8 CVE-2007-4578EPSS 7% Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbi… Anti Virus Patch available Fix from $1,6002007-08-28 HIGH 10.0 CVE-2007-4218EPSS 13% Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remo… Serverprotect Patch available Fix from $1,9502007-08-22 HIGH 10.0 CVE-2007-4219EPSS 10% Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerProtect fo… Serverprotect Patch available Fix from $1,9502007-08-22 HIGH 9.3 CVE-2007-2224EPSS 35% Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visua… Office Mitigation only Fix from $1,9502007-08-14 HIGH 9.3 CVE-2007-3034EPSS 52% Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows re… Windows 2000 Patch available Fix from $1,9502007-08-14