CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
8850 | CVE-2004-0422 | Candidate | flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack. | Assigned (20040419) | None (candidate not yet proposed) | View | |
8849 | CVE-2004-0421 | Candidate | The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message. | Assigned (20040419) | None (candidate not yet proposed) | View | |
8848 | CVE-2004-0420 | Candidate | The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP. | Assigned (20040419) | None (candidate not yet proposed) | View | |
8847 | CVE-2004-0419 | Candidate | XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions. | Assigned (20040416) | None (candidate not yet proposed) | View | |
8846 | CVE-2004-0418 | Candidate | serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data. | Assigned (20040416) | None (candidate not yet proposed) | View |
Page 19174 of 20943, showing 5 records out of 104715 total, starting on record 95866, ending on 95870