Vulnerabilities (CVE)

Filtered by CWE-119
Total 11645 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3868 2 Microsoft, Sun 6 Windows, Java Se, Jdk and 3 more 2024-11-21 9.3 HIGH N/A
Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970.
CVE-2009-3867 2 Microsoft, Sun 6 Windows, Java Se, Jdk and 3 more 2024-11-21 9.3 HIGH N/A
Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.
CVE-2009-3863 1 Novell 1 Groupwise 2024-11-21 5.0 MEDIUM N/A
Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service (application crash) via a long argument to the SetFontFace method.
CVE-2009-3861 1 Safenet-inc 1 Softremote 2024-11-21 6.9 MEDIUM N/A
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd).
CVE-2009-3859 1 Eeye 2 Retina Network Security Scanner, Retina Wifi Scanner 2024-11-21 9.3 HIGH N/A
Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a .rws file with a long RWS010 entry.
CVE-2009-3857 1 Softonic 1 Scite 2024-11-21 4.3 MEDIUM N/A
Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service (application crash) via a Ruby (.rb) file containing a long string, which triggers the crash when a scroll bar is used.
CVE-2009-3854 1 Ibm 1 Tivoli Storage Manager 2024-11-21 10.0 HIGH N/A
Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2009-3853 1 Ibm 1 Tivoli Storage Manager 2024-11-21 9.3 HIGH N/A
Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via crafted data in a TCP packet.
CVE-2009-3849 1 Hp 1 Openview Network Node Manager 2024-11-21 10.0 HIGH N/A
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe.
CVE-2009-3848 1 Hp 1 Openview Network Node Manager 2024-11-21 10.0 HIGH N/A
Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Template parameter, related to the vsprintf function.
CVE-2009-3846 1 Hp 1 Openview Network Node Manager 2024-11-21 10.0 HIGH N/A
Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter.
CVE-2009-3844 1 Hp 1 Openview Data Protector Application Recovery Manager 2024-11-21 10.0 HIGH N/A
Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet.
CVE-2009-3838 1 Pmail 1 Pegasus Mail 2024-11-21 9.3 HIGH N/A
Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long error message.
CVE-2009-3837 1 Eureka-email 1 Eureka Email 2024-11-21 9.3 HIGH N/A
Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message.
CVE-2009-3826 1 Squidguard 1 Squidguard 2024-11-21 5.0 MEDIUM N/A
Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL.
CVE-2009-3812 1 Otslabs 3 Otsav Dj, Otsav Radio, Otsav Tv 2024-11-21 9.3 HIGH N/A
Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.0, and Free version 1.77.001 allows remote attackers to execute arbitrary code via a long playlist in an Ots File List (.ofl) file.
CVE-2009-3811 1 Assistanttools 1 Music Tag Editor 2024-11-21 9.3 HIGH N/A
Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information.
CVE-2009-3810 1 Acoustica 1 Mp3 Audio Mixer 2024-11-21 9.3 HIGH N/A
Heap-based buffer overflow in Acoustica MP3 Audio Mixer 2.471 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in a .M3U playlist file.
CVE-2009-3809 1 Acoustica 1 Mp3 Audio Mixer 2024-11-21 4.3 MEDIUM N/A
Acoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remote attackers to cause a denial of service (crash) via a long string in a .sgp playlist file.
CVE-2009-3807 1 Mixvibes 1 Mixvibes 2024-11-21 9.3 HIGH N/A
Stack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of service (crash) via a long string in a .vib file.