CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2005(Overflow)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
201 CVE-2005-2758 Exec Code Overflow 2005-10-05 2017-07-11
10.0
None Remote Low Not required Complete Complete Complete
Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.
202 CVE-2005-2757 Exec Code Overflow 2005-12-01 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving "validation of URLs."
203 CVE-2005-2756 Exec Code Overflow 2005-11-05 2018-10-19
5.1
None Remote High Not required Partial Partial Partial
Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that triggers an overflow during expansion.
204 CVE-2005-2754 189 Exec Code Overflow 2005-11-05 2018-10-19
5.1
None Remote High Not required Partial Partial Partial
Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Improper movie attributes."
205 CVE-2005-2753 189 Exec Code Overflow 2005-11-05 2018-10-19
5.1
None Remote High Not required Partial Partial Partial
Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes a sign extension of the length element in a Pascal style string.
206 CVE-2005-2747 Exec Code Overflow 2005-10-25 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file.
207 CVE-2005-2744 Exec Code Overflow 2005-10-25 2017-07-11
5.1
None Remote High Not required Partial Partial Partial
Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, and Finder, allows remote attackers to execute arbitrary code via a crafted PICT file.
208 CVE-2005-2720 Exec Code Overflow 2005-08-30 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename.
209 CVE-2005-2718 Exec Code Overflow 2005-08-29 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk.
210 CVE-2005-2705 Exec Code Overflow 2005-09-23 2017-10-11
7.5
None Remote Low Not required Partial Partial Partial
Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code.
211 CVE-2005-2701 Exec Code Overflow 2005-09-23 2017-10-11
7.5
None Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.
212 CVE-2005-2694 Exec Code Overflow 2005-08-26 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary (.tmp) file that contains an entry with a long file name.
213 CVE-2005-2679 Exec Code Overflow 2005-08-23 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.
214 CVE-2005-2668 Exec Code Overflow 2005-08-23 2021-04-14
10.0
None Remote Low Not required Complete Complete Complete
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.
215 CVE-2005-2665 Exec Code Overflow 2005-08-23 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.
216 CVE-2005-2659 Overflow 2005-11-16 2008-09-10
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors.
217 CVE-2005-2658 Exec Code Overflow 2005-09-15 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month.
218 CVE-2005-2644 DoS Exec Code Overflow 2005-08-23 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.
219 CVE-2005-2642 Exec Code Overflow 2005-08-23 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext.
220 CVE-2005-2639 DoS Exec Code Overflow 2005-08-23 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname.
221 CVE-2005-2634 DoS Exec Code Overflow 2005-08-23 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long request.
222 CVE-2005-2630 Exec Code Overflow 2005-11-18 2017-07-11
5.1
None Remote High Not required Partial Partial Partial
Heap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1 and 2 allows remote attackers to execute arbitrary code via a crafted RealPlayer Skin (RJS) file, a different vulnerability than CVE-2004-1094.
223 CVE-2005-2629 Exec Code Overflow 2005-11-18 2018-05-03
5.1
None Remote High Not required Partial Partial Partial
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a different vulnerability than CVE-2004-1481.
224 CVE-2005-2627 Exec Code Overflow 2005-08-19 2011-03-08
7.5
None Remote Low Not required Partial Partial Partial
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap file or (2) data frame dissection, which leads to heap-based buffer overflows.
225 CVE-2005-2618 119 Exec Code Overflow 2005-12-31 2018-10-19
9.3
None Remote Medium Not required Complete Complete Complete
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via (1) a UUE file containing an encoded file with a long filename handled by uudrdr.dll, (2) a compressed ZIP file with a long filename handled by kvarcve.dll, (3) a TAR archive with a long filename that is extracted to a directory with a long path handled by the TAR reader (tarrdr.dll), (4) an email that contains a long HTTP, FTP, or // link handled by the HTML speed reader (htmsr.dll) or (5) an email containing a crafted long link handled by the HTML speed reader (htmsr.dll).
226 CVE-2005-2558 Exec Code Overflow 2005-08-16 2019-12-17
4.6
None Local Low Not required Partial Partial Partial
Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.
227 CVE-2005-2551 DoS Overflow 2005-08-12 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors.
228 CVE-2005-2535 Exec Code Overflow 2005-08-10 2021-05-20
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.
229 CVE-2005-2521 Exec Code Overflow 2005-08-19 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors.
230 CVE-2005-2518 Exec Code Overflow 2005-08-19 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.
231 CVE-2005-2514 Exec Code Overflow 2005-08-19 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.
232 CVE-2005-2507 Exec Code Overflow 2005-08-19 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.
233 CVE-2005-2505 Exec Code Overflow 2005-08-19 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation.
234 CVE-2005-2502 Exec Code Overflow 2005-08-19 2008-09-10
5.1
None Remote High Not required Partial Partial Partial
Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file.
235 CVE-2005-2501 Exec Code Overflow 2005-08-19 2008-09-05
7.6
None Remote High Not required Complete Complete Complete
Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file.
236 CVE-2005-2500 DoS Exec Code Overflow 2005-08-08 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Server 9, might allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted XDR data for the nfsacl protocol.
237 CVE-2005-2495 189 Exec Code Overflow 2005-09-15 2018-10-19
5.1
None Remote High Not required Partial Partial Partial
Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.
238 CVE-2005-2491 Exec Code Overflow 2005-08-23 2021-06-06
7.5
None Remote Low Not required Partial Partial Partial
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
239 CVE-2005-2490 Exec Code Overflow 2005-09-14 2018-10-19
4.6
None Local Low Not required Partial Partial Partial
Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary code by calling sendmsg and modifying the message contents in another thread.
240 CVE-2005-2484 Exec Code Overflow 2005-08-07 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in the rdb_query function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code.
241 CVE-2005-2472 DoS Overflow 2005-08-05 2017-07-11
5.0
None Remote Low Not required None None Partial
Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service (application crash) via a long string to SMTP (1) HELO or (2) MAIL FROM commands.
242 CVE-2005-2470 DoS Exec Code Overflow 2005-08-16 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
243 CVE-2005-2469 Exec Code Overflow 2005-10-20 2017-07-11
4.6
None Local Low Not required Partial Partial Partial
Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users to execute arbitrary code via a long user name in the USER command.
244 CVE-2005-2456 DoS Exec Code Overflow 2005-08-04 2018-10-19
2.1
None Local Low Not required None None Partial
Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array.
245 CVE-2005-2450 Overflow +Priv 2005-08-03 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
246 CVE-2005-2425 Exec Code Overflow 2005-08-03 2017-07-11
10.0
None Remote Low Not required Complete Complete Complete
Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a (1) long history parameter in the configuration file (ares.conf) or (2) long search string.
247 CVE-2005-2388 Exec Code Overflow 2005-07-27 2019-04-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.
248 CVE-2005-2387 Exec Code Overflow 2005-07-27 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via (1) a RCPT TO command with a long DNS name, or (2) a large number of RCPT TO commands with a long e-mail name arugment in the last command.
249 CVE-2005-2385 Exec Code Overflow 2005-07-27 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename.
250 CVE-2005-2376 DoS Overflow 2005-07-26 2016-10-18
5.0
None Remote Low Not required None None Partial
Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via a long (1) nickname or (2) chat message.
Total number of vulnerabilities : 657   Page : 1 2 3 4 5 (This Page)6 7 8 9 10 11 12 13 14
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.