Total
11483 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-1661 | 1 Hp | 1 Storageworks Storage Mirroring | 2017-08-07 | 10.0 HIGH | N/A |
Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request. | |||||
CVE-2008-1670 | 1 Kde | 1 Kde | 2017-08-07 | 9.3 HIGH | N/A |
Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image. | |||||
CVE-2008-1685 | 1 Gnu | 1 Gcc | 2017-08-07 | 6.8 MEDIUM | N/A |
** DISPUTED ** gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer overflow attacks, and provide no diagnostic message about this removal. NOTE: the vendor has determined that this compiler behavior is correct according to section 6.5.6 of the C99 standard (aka ISO/IEC 9899:1999). | |||||
CVE-2008-1703 | 1 Tibco | 8 Adapter Files Z Os, Hawk, Iprocess Engine and 5 more | 2017-08-07 | 9.3 HIGH | N/A |
Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message. | |||||
CVE-2008-1704 | 1 Tibco | 2 Enterprise Message Service, Iprocess Engine | 2017-08-07 | 10.0 HIGH | N/A |
Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server. | |||||
CVE-2008-1718 | 2 Autonomy, Ibm | 2 Keyview, Lotus Notes | 2017-08-07 | 9.3 HIGH | N/A |
Buffer overflow in mimesr.dll in Autonomy (formerly Verity) KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail (MIME) attachment. | |||||
CVE-2008-1809 | 1 Novell | 1 Edirectory | 2017-08-07 | 10.0 HIGH | N/A |
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing "NULL search parameters." | |||||
CVE-2008-1833 | 1 Clam Anti-virus | 1 Clamav | 2017-08-07 | 7.5 HIGH | N/A |
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary. | |||||
CVE-2008-1928 | 1 Imager | 1 Imager | 2017-08-07 | 5.0 MEDIUM | N/A |
Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels. | |||||
CVE-2008-1922 | 1 Sarg | 1 Squid Analysis Report Generator | 2017-08-07 | 10.0 HIGH | N/A |
Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary code via unknown vectors, probably a crafted Squid log file. | |||||
CVE-2008-1959 | 1 Sipp | 1 Sipp | 2017-08-07 | 7.5 HIGH | N/A |
Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SIP message. NOTE: some of these details are obtained from third party information. | |||||
CVE-2008-1994 | 1 Ahmed Abdel-hamid Mohamed | 1 Acon | 2017-08-07 | 7.2 HIGH | N/A |
Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns. | |||||
CVE-2008-2021 | 1 Lhaplus | 1 Lhaplus | 2017-08-07 | 7.5 HIGH | N/A |
Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archive. | |||||
CVE-2008-2040 | 1 Peercast | 1 Peercast | 2017-08-07 | 7.5 HIGH | N/A |
Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-peercast allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Basic Authentication string with a long (1) username or (2) password. | |||||
CVE-2008-2080 | 1 Nasa Goddard Space Flight Center | 1 Common Data Format | 2017-08-07 | 7.5 HIGH | N/A |
Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags. | |||||
CVE-2008-2149 | 1 Wordnet | 1 Wordnet | 2017-08-07 | 7.5 HIGH | N/A |
Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option. NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is used as a back end. | |||||
CVE-2008-2085 | 1 Icewalkers | 1 Sipp | 2017-08-07 | 7.5 HIGH | N/A |
Multiple stack-based buffer overflows in the (1) get_remote_ip_media and (2) get_remote_ipv6_media functions in call.cpp in SIPp 3.1 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted SIP message. | |||||
CVE-2008-2158 | 1 Emc Corporation | 1 Alphastor | 2017-08-07 | 10.0 HIGH | N/A |
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025. | |||||
CVE-2008-2218 | 1 Nortel | 1 Multimedia Communications Server | 2017-08-07 | 5.0 MEDIUM | N/A |
Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service (crash) via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of service plugin. | |||||
CVE-2008-2240 | 1 Ibm | 1 Lotus Domino | 2017-08-07 | 10.0 HIGH | N/A |
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long Accept-Language HTTP header. |