Linux

CVEs (144)

• CVE-2004-0990Mar 1, 2005
  Libgd

  Libgd
  risk 0.05cvss —epss 0.28

  Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the…

• CVE-2004-0933Jan 27, 2005
  Ca

  eTrust Antivirus
  risk 0.05cvss —epss 0.21

  Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass…

• CVE-2004-0333Nov 23, 2004
  Winzip

  Winzip
  risk 0.05cvss —epss 0.24

  Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.

• CVE-2004-0557Aug 6, 2004
  Sox Oss

  Sox
  risk 0.05cvss —epss 0.25

  Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.

• CVE-2004-0386May 4, 2004
  MPlayer

  Mplayer
  risk 0.05cvss —epss 0.27

  Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.

• CVE-2003-0681Oct 6, 2003
  Sendmail, Inc.

  Sendmail
  risk 0.05cvss —epss 0.22

  A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

• CVE-2010-1159Oct 28, 2013
  File Project

  Linux
  risk 0.04cvss —epss 0.07

  Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.

• CVE-2005-1267Jun 10, 2005
  Tcpdump

  Tcpdump
  risk 0.04cvss —epss 0.14

  The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.

• CVE-2004-1029Mar 1, 2005
  Sun Corporation

  Jre
  risk 0.04cvss —epss 0.17

  The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute…

• CVE-2004-0937Feb 9, 2005
  Sophos

  Small Business Suite
  risk 0.04cvss —epss 0.15

  Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being…

• CVE-2004-0934Jan 27, 2005
  Kaspersky Lab

  Kaspersky
  risk 0.04cvss —epss 0.15

  Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

• CVE-2004-0935Jan 27, 2005
  Eset

  Anti-Virus
  risk 0.04cvss —epss 0.15

  Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

• CVE-2004-0936Jan 27, 2005
  RAV

  antivirus
  risk 0.04cvss —epss 0.15

  RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

• CVE-2004-1096Jan 10, 2005
  Perl Foundation

  Archive::Zip
  risk 0.04cvss —epss 0.17

  Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on…

• CVE-2004-1161Jan 10, 2005
  Rssh

  Rssh
  risk 0.04cvss —epss 0.07

  rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.

• CVE-2004-1304Jan 10, 2005
  File Project

  File
  risk 0.04cvss —epss 0.11

  Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.

• CVE-2004-1471Dec 31, 2004
  Nongnu

  Cvs
  risk 0.04cvss —epss 0.08

  Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper…

• CVE-2004-1491Dec 31, 2004
  Opera

  Opera
  risk 0.04cvss —epss 0.13

  Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.

• CVE-2004-0633Dec 6, 2004
  Ethereal Group

  Ethereal
  risk 0.04cvss —epss 0.18

  The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.

• CVE-2004-0416Aug 6, 2004
  Nongnu

  Cvs
  risk 0.04cvss —epss 0.13

  Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.