Search vulnerabilities

Results 15,581

Export CSV
CVE-2008-6998

Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.

CVSS 2.0 · 9.3 Critical EPSS 9.7% KEV · Not listed
Vendors
Products
CVE-2008-7004

Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c.

CVSS 2.0 · 10.0 Critical EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2008-7009

Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 6.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2008-7015

Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service (server exit) via a packet with a large length value that triggers a memory allocation failure.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
CVE-2008-7031

Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.

CVSS 2.0 · 10.0 Critical EPSS 8.3% KEV · Not listed
Vendors
Products
CVE-2009-0235

Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Word 97 file that triggers memory corruption, related to use of inconsistent integer data sizes for an unspecified length field, aka "WordPad Word 97 Text Converter Stack Overflow Vulnerability."

CVSS 2.0 · 9.3 Critical EPSS 33.6% KEV · Not listed
Vendors
CVE-2009-0241

ganglia: gmetad buffer overflow

Stack-based buffer overflow in the process_path function in gmetad/server.c in Ganglia 3.1.1 allows remote attackers to cause a denial of service (crash) via a request to the gmetad service with a long pathname.

CVSS 2.0 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Products
CVE-2009-0246

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE (aka .hdr) file.

CVSS 2.0 · 9.3 Critical EPSS 3.4% KEV · Not listed
Vendors
Products
CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 9.3 Critical EPSS 2.6% KEV · Not listed
Vendors
Products
CVE-2009-0261

Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\DefaultSkin\DefaultSkin.ini file with a large ColumnHeaderSpan value.

CVSS 2.0 · 9.3 Critical EPSS 13.2% KEV · Not listed
Vendors
CVE-2009-0262

Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 9.3 Critical EPSS 6.2% KEV · Not listed
Vendors
Products
CVE-2009-0263

Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.

CVSS 2.0 · 10.0 Critical EPSS 16.7% KEV · Not listed
Vendors
Products
CVE-2009-0264

Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors.

CVSS 2.0 · 10.0 Critical EPSS 1.6% KEV · Not listed
Vendors
CVE-2009-0266

Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3l playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0 · 9.3 Critical EPSS 4.5% KEV · Not listed
Vendors
Products
CVE-2009-0270

Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 5.5% KEV · Not listed
Vendors
CVE-2009-0298

Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property.

CVSS 2.0 · 9.3 Critical EPSS 5.6% KEV · Not listed
Products
CVE-2009-0306

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 9.3 Critical EPSS 3.9% KEV · Not listed
Vendors
CVE-2009-0310

Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to "incoming data and authentication-strings."

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2009-0323

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via (1) a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; (2) an "HTML GI" in a start tag, which is not properly handled by the ProcessStartGI function; and unspecified vectors in (3) html2thot.c and (4) xml2thot.c, related to the msgBuffer variable. NOTE: these are different vectors than CVE-2008-6005.

CVSS 2.0 · 10.0 Critical EPSS 62.5% KEV · Not listed
Vendors
W3
Products