CVE List

Id CVE No. Status Description Phase Votes Comments Actions
14456  CVE-2005-3250  Candidate  Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related to the "/proc" filesystem, which trigger a null dereference.  Assigned (20051017)  None (candidate not yet proposed)    View
14457  CVE-2005-3251  Candidate  Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.  Assigned (20051017)  None (candidate not yet proposed)    View
14397  CVE-2005-3191  Candidate  Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.  Assigned (20051014)  None (candidate not yet proposed)    View
14398  CVE-2005-3192  Candidate  Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.  Assigned (20051014)  None (candidate not yet proposed)    View
14399  CVE-2005-3193  Candidate  Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.  Assigned (20051014)  None (candidate not yet proposed)    View

Page 18840 of 20943, showing 5 records out of 104715 total, starting on record 94196, ending on 94200

Actions