CVE List

Id CVE No. Status Description Phase Votes Comments Actions
8850  CVE-2004-0422  Candidate  flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.  Assigned (20040419)  None (candidate not yet proposed)    View
8849  CVE-2004-0421  Candidate  The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.  Assigned (20040419)  None (candidate not yet proposed)    View
8848  CVE-2004-0420  Candidate  The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.  Assigned (20040419)  None (candidate not yet proposed)    View
8847  CVE-2004-0419  Candidate  XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.  Assigned (20040416)  None (candidate not yet proposed)    View
8846  CVE-2004-0418  Candidate  serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.  Assigned (20040416)  None (candidate not yet proposed)    View

Page 19174 of 20943, showing 5 records out of 104715 total, starting on record 95866, ending on 95870

Actions