Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-11-17 | CVE-2003-0843 | Remote Security vulnerability in Mod Gzip Format string vulnerability in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode and using the Apache log, allows remote attackers to execute arbitrary code via format string characters in an HTTP GET request with an "Accept-Encoding: gzip" header. | 7.5 |
| 2003-11-17 | CVE-2003-0842 | Remote Security vulnerability in DAG APT Repository MOD Gzip 1.3.26.1A Stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header. | 7.5 |
| 2003-11-17 | CVE-2003-0840 | Local Security vulnerability in HP Hp-Ux 11.00 Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long DISPLAY environment variable. | 7.2 |
| 2003-11-17 | CVE-2003-0838 | Unspecified vulnerability in Microsoft IE and Internet Explorer Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as an HTA application, a different vulnerability than CVE-2003-0532, and as exploited using the QHosts Trojan horse (aka Trojan.Qhosts, QHosts-1, VBS.QHOSTS, or aolfix.exe). | 7.5 |
| 2003-11-17 | CVE-2003-0837 | Buffer Overflow vulnerability in IBM DB2 Universal Database 7.2 Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 for Windows, before Fixpak 10a, allows attackers with "Connect" privileges to execute arbitrary code via the INVOKE command. | 7.5 |
| 2003-11-17 | CVE-2003-0836 | Unspecified vulnerability in IBM DB2 Universal Database 7.2/8.1 Stack-based buffer overflow in IBM DB2 Universal Data Base 7.2 before Fixpak 10 and 10a, and 8.1 before Fixpak 2, allows attackers with "Connect" privileges to execute arbitrary code via a LOAD command. | 7.5 |
| 2003-11-17 | CVE-2003-0835 | Unspecified vulnerability in Mplayer Multiple buffer overflows in asf_http_request of MPlayer before 0.92 allows remote attackers to execute arbitrary code via an ASX header with a long hostname. | 7.5 |
| 2003-11-17 | CVE-2003-0833 | Unspecified vulnerability in Webfs Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname. | 7.5 |
| 2003-11-17 | CVE-2003-0809 | Unspecified vulnerability in Microsoft IE and Internet Explorer Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page. | 7.5 |
| 2003-11-17 | CVE-2003-0787 | Unspecified vulnerability in Openbsd Openssh 3.7.1/3.7.1P1 The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges. | 7.5 |