Latest CVE Feed
-
4.9
MEDIUMCVE-2006-3634
The (1) __futex_atomic_op and (2) futex_atomic_cmpxchg_inatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial... Read more
Affected Products : linux_kernel- Published: Aug. 04, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-3462
Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.... Read more
Affected Products : libtiff- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-3459
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-3460
Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size... Read more
Affected Products : libtiff- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-0392
Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Canon RAW image.... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2006-3500
The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability.... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-3501
Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Radiance image.... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-3505
WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated.... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
4.0
MEDIUMCVE-2006-0393
OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang.... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
7.8
HIGHCVE-2006-3463
The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, whic... Read more
Affected Products : libtiff- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-3465
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.... Read more
Affected Products : libtiff- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-3464
TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified ve... Read more
Affected Products : libtiff- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-3504
The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari.... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-3461
Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.... Read more
Affected Products : libtiff- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-3502
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly ha... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-3503
Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed GIF image.... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-3499
The dynamic linker (dyld) in Apple Mac OS X 10.3.9 allows local users to obtain sensitive information via unspecified dynamic linker options that affect the use of standard error (stderr) by privileged applications.... Read more
- Published: Aug. 03, 2006
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2006-3972
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. (dot dot) in the chatid parameter.... Read more
Affected Products : ajax_chat- Published: Aug. 02, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-3497
Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Zip archive.... Read more
- Published: Aug. 02, 2006
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2006-1473
Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors.... Read more
- Published: Aug. 02, 2006
- Modified: Apr. 03, 2025