NVD-CWE-Other Archives - CVE Vulnerability

CVE-2008-7256

Sun, 26 Feb 2023 09:11:56 +0000

mm/shmem.c in the Linux kernel before 2.6.28-rc8, when strict overcommit is enabled and CONFIG_SECURITY is disabled, does not properly handle the export of shmemfs objects by knfsd, which allows attackers to cause a denial of service (NULL pointer dereference and knfsd crash) or possibly have unspecified other impact via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1643.

The post CVE-2008-7256 appeared first on CVE Vulnerability.

CVE-2008-7211

Sun, 26 Feb 2023 09:11:55 +0000

CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object (FDO) to prevent user-moade access to the Physical Device Object (PDO), which allows local users to gain SYSTEM privileges via a crafted IRP request that dereferences a NULL FsContext pointer.

The post CVE-2008-7211 appeared first on CVE Vulnerability.

CVE-2008-7200

Sun, 26 Feb 2023 09:11:54 +0000

Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors.

The post CVE-2008-7200 appeared first on CVE Vulnerability.

CVE-2008-7168

Sun, 26 Feb 2023 09:11:53 +0000

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009.

The post CVE-2008-7168 appeared first on CVE Vulnerability.

CVE-2008-7137

Sun, 26 Feb 2023 09:11:52 +0000

WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service (crash) via an empty query string to port 59278 and other unspecified vectors.

The post CVE-2008-7137 appeared first on CVE Vulnerability.

CVE-2008-7104

Sun, 26 Feb 2023 09:11:51 +0000

Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (message queue delay and incomplete spam rule update) via a crafted (1) RTF or (2) PDF file.

The post CVE-2008-7104 appeared first on CVE Vulnerability.

CVE-2008-7105

Sun, 26 Feb 2023 09:11:51 +0000

Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to CVE-2008-7104.

The post CVE-2008-7105 appeared first on CVE Vulnerability.

CVE-2008-7106

Sun, 26 Feb 2023 09:11:51 +0000

The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection or a denial of service (message loss or delay).

The post CVE-2008-7106 appeared first on CVE Vulnerability.

CVE-2008-7065

Sun, 26 Feb 2023 09:11:50 +0000

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and device reboot) via a crafted SIP packet to UDP port 5060.

The post CVE-2008-7065 appeared first on CVE Vulnerability.

CVE-2008-7001

Sun, 26 Feb 2023 09:11:49 +0000

Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary code via unknown vectors.

The post CVE-2008-7001 appeared first on CVE Vulnerability.