Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-01-10 CVE-2004-1128 Remote vulnerability in Youngzsoft CMailServer
Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.
network
low complexity
youngzsoft
critical
10.0
2005-01-10 CVE-2004-1127 Remote Buffer Overflow vulnerability in Open DC HUB Direct Connect Peer-To-Peer Client 0.7.14
Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command.
network
low complexity
open-dc-hub
critical
10.0
2005-01-10 CVE-2004-1125 Improper Input Validation vulnerability in multiple products
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
9.3
2005-01-10 CVE-2004-1123 Unspecified vulnerability in Apple products
Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.
network
low complexity
apple
5.0
2005-01-10 CVE-2004-1122 Unspecified vulnerability in Apple Safari 1.2.3
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.
network
low complexity
apple
7.5
2005-01-10 CVE-2004-1120 Remote Buffer Overflow vulnerability in ProZilla
Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.
network
low complexity
prozilla
critical
10.0
2005-01-10 CVE-2004-1119 Remote Buffer Overflow vulnerability in Nullsoft Winamp
Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.
network
low complexity
nullsoft
critical
10.0
2005-01-10 CVE-2004-1118 Remote Buffer Overflow vulnerability in Weonlydo Wodftpdlx Activex Component 2.1.18
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename.
network
low complexity
weonlydo
critical
10.0
2005-01-10 CVE-2004-1117 Local Security vulnerability in Linux
The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
local
low complexity
gentoo
7.2
2005-01-10 CVE-2004-1116 Local Security vulnerability in Linux
The init scripts in Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
local
low complexity
gentoo
7.2