CVE-2007-2509

php CRLF injection

CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.

CVSS 2.0 · 2.6 Low EPSS 2.1% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Rhel Application Stack

CVE-2007-2510

php make_http_soap_request flaw

Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.

CVSS 2.0 · 5.1 Medium EPSS 2.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Rhel Application Stack

CVE-2007-2525

PPPoE socket PPPIOCGCHAN denial of service

Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service (memory consumption) by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2007-2583

mysql: DoS via statement with crafted IF clause

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.

CVSS 2.0 · 4.0 Medium EPSS 11.3% KEV · Not listed

Vendors

Canonical Debian Oracle and 1 more

Products

Ubuntu Linux Debian Linux Mysql and 1 more

CVE-2007-2589

CSRF through HTML message in squirrelmail

Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed

Vendors

Redhat Squirrelmail

Products

Enterprise Linux Squirrelmail

CVE-2007-2683

Buffer overflow in mutt's gecos structure handling

Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.

CVSS 2.0 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Mutt Redhat

Products

Mutt Enterprise Linux

CVE-2007-2691

mysql DROP privilege not enforced when renaming tables

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.

CVSS 2.0 · 4.9 Medium EPSS 2.8% KEV · Not listed

Vendors

Canonical Debian Mysql and 1 more

Products

Ubuntu Linux Debian Linux Mysql and 2 more

CVE-2007-2692

mysql SECURITY INVOKER functions do not drop privileges

The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.

CVSS 2.0 · 6.0 Medium EPSS 1.9% KEV · Not listed

Vendors

Mysql Oracle Redhat

Products

Mysql Mysql Enterprise Linux and 1 more

CVE-2007-2721

jasper: crash in jpc_qcx_getcompparms

The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed

Vendors

Jasper Jpeg-2000 Redhat

Products

Jasper Jpeg-2000 Enterprise Linux

CVE-2007-2754

freetype integer overflow

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 5.8% KEV · Not listed

Vendors

Freetype Redhat

Products

Freetype Enterprise Linux

CVE-2007-2756

gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.

CVSS 2.0 · 4.3 Medium EPSS 4.3% KEV · Not listed

Vendors

Libgd Redhat

Products

Libgd Enterprise Linux Rhel Application Stack

CVE-2007-2797

(mesg: error: tty device is not owned by group `tty')

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Debian Redhat Xterm

Products

Debian Linux Enterprise Linux Xterm

CVE-2007-2798

krb5 kadmind buffer overflow

Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.

CVSS 2.0 · 9.0 Critical EPSS 7.5% KEV · Not listed

Vendors

Canonical Debian Mit and 1 more

Products

Ubuntu Linux Debian Linux Kerberos 5 and 1 more

CVE-2007-2799

file integer overflow

Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.

CVSS 2.0 · 5.1 Medium EPSS 2.7% KEV · Not listed

Vendors

File Redhat Sleuth Kit

Products

File Enterprise Linux The Sleuth Kith

CVE-2007-2834

openoffice.org TIFF parsing heap overflow

Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 12.0% KEV · Not listed

Vendors

Apache Canonical Debian and 2 more

Products

Openoffice Ubuntu Linux Debian Linux and 3 more

CVE-2007-2867

Multiple Firefox flaws (CVE-2007-1562, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)

Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.

CVSS 2.0 · 9.3 Critical EPSS 3.4% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Thunderbird and 1 more

CVE-2007-2868

security flaw

Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Thunderbird and 1 more

CVE-2007-2869

Multiple Firefox flaws (CVE-2007-1562, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)

The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in a submitted form.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Enterprise Linux

CVE-2007-2870

security flaw

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site, which is executed in the context of that site.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Enterprise Linux

CVE-2007-2871

Multiple Firefox flaws (CVE-2007-1562, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane. NOTE: this issue can be leveraged for phishing and other attacks.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Enterprise Linux