Vulnerabilities > Low

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0591 Unspecified vulnerability in Mozilla Firefox
Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."
network
high complexity
mozilla
2.6
2005-05-02 CVE-2005-0586 Remote vulnerability in Mozilla Suite
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content.
network
high complexity
mozilla
2.6
2005-05-02 CVE-2005-0584 Unspecified vulnerability in Mozilla Firefox and Mozilla
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that generated the prompt, which could facilitate spoofing and phishing attacks.
network
high complexity
mozilla
2.6
2005-05-02 CVE-2005-0578 Remote vulnerability in Mozilla Suite
Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory.
local
low complexity
mozilla
2.1
2005-05-02 CVE-2005-0576 File Corruption vulnerability in SUN Solaris 9.0
Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files.
local
low complexity
sun
3.6
2005-05-02 CVE-2005-0550 Unspecified vulnerability in Microsoft Windows 2000, Windows 2003 Server and Windows XP
Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".
local
low complexity
microsoft
2.1
2005-05-02 CVE-2005-0492 Improper Input Validation vulnerability in Adobe Acrobat Reader 6.0.3/7.0
Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF file that contains a negative Count value in the root page node.
network
high complexity
adobe CWE-20
2.6
2005-05-02 CVE-2005-0465 Unspecified vulnerability in SGI Irix
gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.
local
low complexity
sgi
2.1
2005-05-02 CVE-2005-0464 Unspecified vulnerability in SGI Irix 6.5.22
gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.
local
low complexity
sgi
2.1
2005-05-02 CVE-2005-0448 Local Race Condition Privilege Escalation vulnerability in Perl 'rmdir()'
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
local
high complexity
larry-wall
1.2