Vulnerabilities > Redhat > Linux > Critical

DATE CVE VULNERABILITY TITLE RISK
2008-06-24 CVE-2008-2427 Buffer Errors vulnerability in Pagesperso-Orange GFL Sdk, Nconvert and Xnview
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file.
9.3
2005-12-31 CVE-2005-3625 Resource Management Errors vulnerability in multiple products
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
10.0
2005-01-27 CVE-2004-0902 Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.
network
low complexity
mozilla conectiva redhat suse
critical
10.0
2005-01-27 CVE-2004-0903 Remote Buffer Overflow vulnerability in Mozilla Browser Vcard Handling
Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.
network
low complexity
mozilla conectiva redhat suse
critical
10.0
2005-01-10 CVE-2004-1025 XPM Image Decoding Buffer Overflow vulnerability in IMLib
Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
network
low complexity
enlightenment gentoo redhat
critical
10.0
2005-01-10 CVE-2004-1026 XPM Image Decoding Buffer Overflow vulnerability in IMLib
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
network
low complexity
enlightenment gentoo redhat
critical
10.0
2004-12-31 CVE-2004-0904 Integer Overflow vulnerability in Mozilla Browser BMP Image Decoding
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
network
low complexity
mozilla netscape conectiva redhat
critical
10.0
2003-06-16 CVE-2003-0248 Unspecified vulnerability in Redhat Linux
The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.
network
low complexity
redhat
critical
10.0
2002-03-15 CVE-2002-0083 Off-by-one Error vulnerability in multiple products
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
9.8
2001-03-26 CVE-2001-0197 Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
network
low complexity
icecast redhat
critical
10.0