Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: январь 2007 г.

55 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2007-0015
    42В плане

    Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI.

    СредняяCVSS 6,8Готовый эксплойтEPSS 48 %

    apple · quicktime1 янв. 2007 г.

  • CVE-2007-0017
    31Наблюдать

    Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plu

    СредняяCVSS 6,8Proof of conceptEPSS 12 %

    videolan · vlc media player2 янв. 2007 г.

  • CVE-2007-0044
    34Наблюдать

    Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the bro

    СредняяCVSS 4,3Proof of conceptEPSS 56 %

    adobe · acrobat3 янв. 2007 г.

  • CVE-2007-0045
    31Наблюдать

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Ad

    СредняяCVSS 4,3Эксплойта нетEPSS 47 %

    adobe · acrobat3 янв. 2007 г.

  • CVE-2007-0046
    47В плане

    Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to ex

    ВысокаяCVSS 7,5Proof of conceptEPSS 56 %

    adobe · acrobat reader3 янв. 2007 г.

  • CVE-2007-0048
    30Наблюдать

    Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x

    СредняяCVSS 5,0Эксплойта нетEPSS 33 %

    adobe · acrobat3 янв. 2007 г.

  • CVE-2007-0086
    34Наблюдать

    The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of servic

    ВысокаяCVSS 7,8Эксплойта нетEPSS 10 %

    apache · http server5 янв. 2007 г.

  • CVE-2007-0087
    38Наблюдать

    Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to c

    ВысокаяCVSS 7,8Эксплойта нетEPSS 24 %

    microsoft · internet information server5 янв. 2007 г.

  • CVE-2007-0099
    45В плане

    Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote

    КритическаяCVSS 9,3Эксплойта нетEPSS 25 %

    microsoft · xml core services8 янв. 2007 г.

  • CVE-2007-0103
    32Наблюдать

    The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly i

    СредняяCVSS 6,8Proof of conceptEPSS 16 %

    adobe · acrobat reader8 янв. 2007 г.

  • CVE-2007-0105
    33Наблюдать

    Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engin

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    cisco · secure access control server8 янв. 2007 г.

  • CVE-2007-0107
    31Наблюдать

    WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote

    СредняяCVSS 6,8Proof of conceptEPSS 11 %

    wordpress · wordpress8 янв. 2007 г.

  • CVE-2007-0126
    40В плане

    Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index b

    КритическаяCVSS 9,3Proof of conceptEPSS 11 %

    opera · opera browser8 янв. 2007 г.

  • CVE-2007-0134
    34Наблюдать

    Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, w

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    igeneric · ig shop9 янв. 2007 г.

  • CVE-2007-0027
    46В плане

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed

    КритическаяCVSS 9,3Эксплойта нетEPSS 31 %

    microsoft · excel9 янв. 2007 г.

  • CVE-2007-0024
    50В плане

    Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000

    КритическаяCVSS 9,3Proof of conceptEPSS 44 %

    microsoft · windows 20009 янв. 2007 г.

  • CVE-2007-0028
    47В плане

    Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which a

    КритическаяCVSS 9,3Эксплойта нетEPSS 33 %

    microsoft · excel9 янв. 2007 г.

  • CVE-2007-0029
    46В плане

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 30 %

    microsoft · excel9 янв. 2007 г.

  • CVE-2007-0030
    47В плане

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code

    КритическаяCVSS 9,3Эксплойта нетEPSS 32 %

    microsoft · excel9 янв. 2007 г.

  • CVE-2007-0031
    50В плане

    Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attack

    КритическаяCVSS 9,3Proof of conceptEPSS 42 %

    microsoft · excel9 янв. 2007 г.

  • CVE-2007-0033
    47В плане

    Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal me

    КритическаяCVSS 9,3Эксплойта нетEPSS 32 %

    microsoft · office9 янв. 2007 г.

  • CVE-2007-0034
    48В плане

    Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers

    КритическаяCVSS 9,3Эксплойта нетEPSS 37 %

    microsoft · office9 янв. 2007 г.

  • CVE-2007-0167
    33Наблюдать

    Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    ppc search engine · ppc search engine9 янв. 2007 г.

  • CVE-2007-0168
    36Наблюдать

    The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Busi

    ВысокаяCVSS 7,5Proof of conceptEPSS 20 %

    broadcom · brightstor arcserve backup11 янв. 2007 г.

  • CVE-2007-0169
    51В плане

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Bu

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 70 %

    broadcom · brightstor arcserve backup11 янв. 2007 г.

  • CVE-2007-0233
    34Наблюдать

    wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric parameter with a va

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    wordpress · wordpress12 янв. 2007 г.

  • CVE-2007-0236
    47В плане

    Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause

    КритическаяCVSS 10,0Proof of conceptEPSS 21 %

    apple · mac os x16 янв. 2007 г.

  • CVE-2007-0247
    26Наблюдать

    squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory lis

    СредняяCVSS 5,0Proof of conceptEPSS 20 %

    squid · squid16 янв. 2007 г.

  • CVE-2006-5171
    45В плане

    Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, E

    КритическаяCVSS 10,0Эксплойта нетEPSS 16 %

    ca · protection suites16 янв. 2007 г.

  • CVE-2006-5172
    45В плане

    Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, E

    КритическаяCVSS 10,0Эксплойта нетEPSS 15 %

    ca · protection suites16 янв. 2007 г.

  • CVE-2007-0256
    35Наблюдать

    VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.

    ВысокаяCVSS 7,8Proof of conceptEPSS 11 %

    videolan · vlc media player16 янв. 2007 г.

  • CVE-2007-0222
    24Наблюдать

    Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read

    СредняяCVSS 5,0Эксплойта нетEPSS 13 %

    oracle · application server16 янв. 2007 г.

  • CVE-2007-0243
    30Наблюдать

    Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.

    СредняяCVSS 6,8Proof of conceptEPSS 11 %

    sun · jdk17 янв. 2007 г.

  • CVE-2007-0352
    48В плане

    Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a craft

    КритическаяCVSS 9,3Proof of conceptEPSS 36 %

    microsoft · html help workshop18 янв. 2007 г.

  • CVE-2007-0356
    25Наблюдать

    The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial

    СредняяCVSS 5,0Proof of conceptEPSS 18 %

    common controls replacement project · foldertreeview activex control18 янв. 2007 г.

  • CVE-2007-0373
    31Наблюдать

    Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword

    СредняяCVSS 6,8Эксплойта нетEPSS 12 %

    joomla · joomla19 янв. 2007 г.

  • CVE-2007-0021
    37Наблюдать

    Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and applicat

    ВысокаяCVSS 7,5Proof of conceptEPSS 23 %

    apple · ichat22 янв. 2007 г.

  • CVE-2007-0427
    46В плане

    Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help

    КритическаяCVSS 9,3Proof of conceptEPSS 31 %

    microsoft · html help workshop22 янв. 2007 г.

  • CVE-2007-0449
    64На этой неделе

    Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r

    КритическаяCVSS 10,0Готовый эксплойтEPSS 79 %

    broadcom · brightstor arcserve backup laptops desktops23 янв. 2007 г.

  • CVE-2007-0468
    34Наблюдать

    Stack-based buffer overflow in rcdll.dll in msdev.exe in Visual C++ (MSVC) in Microsoft Visual Studio 6.0 SP6 allows user-assisted remote at

    СредняяCVSS 6,8Эксплойта нетEPSS 24 %

    microsoft · visual studio23 янв. 2007 г.

  • CVE-2007-0018
    48В плане

    Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote

    КритическаяCVSS 9,3Готовый эксплойтEPSS 36 %

    altdo · convert mp3 master24 янв. 2007 г.

  • CVE-2007-0444
    32Наблюдать

    Stack-based buffer overflow in the print provider library (cpprov.dll) in Citrix Presentation Server 4.0, MetaFrame Presentation Server 3.0,

    ВысокаяCVSS 7,2Proof of conceptEPSS 13 %

    citrix · metaframe24 янв. 2007 г.

  • CVE-2007-0493
    35Наблюдать

    Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum

    ВысокаяCVSS 7,8Эксплойта нетEPSS 12 %

    isc · bind25 янв. 2007 г.

  • CVE-2007-0494
    30Наблюдать

    ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum

    СредняяCVSS 4,3Эксплойта нетEPSS 44 %

    isc · bind25 янв. 2007 г.

  • CVE-2007-0515
    49В плане

    Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial

    КритическаяCVSS 9,3Proof of conceptEPSS 38 %

    microsoft · office25 янв. 2007 г.

  • CVE-2006-6956
    20Наблюдать

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a web page that contains a large number of nest

    СредняяCVSS 4,3Эксплойта нетEPSS 10 %

    microsoft · internet explorer29 янв. 2007 г.

  • CVE-2007-0463
    25Наблюдать

    Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service (applicat

    СредняяCVSS 5,0Proof of conceptEPSS 17 %

    apple · software update29 янв. 2007 г.

  • CVE-2007-0561
    33Наблюдать

    Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    xero portal · xero portal30 янв. 2007 г.

  • CVE-2007-0562
    21Наблюдать

    Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service

    СредняяCVSS 4,3Proof of conceptEPSS 13 %

    microsoft · windows explorer30 янв. 2007 г.

  • CVE-2007-0455
    34Наблюдать

    Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a den

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    gd graphics library project · gd graphics library30 янв. 2007 г.

  • CVE-2007-0464
    24Наблюдать

    The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause

    СредняяCVSS 5,0Proof of conceptEPSS 14 %

    apple · mac os x30 янв. 2007 г.

  • CVE-2007-0584
    51В плане

    PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neric) allows remote att

    ВысокаяCVSS 7,5Proof of conceptEPSS 70 %

    g-neric · php generic library and framework30 янв. 2007 г.

  • CVE-2007-0465
    36Наблюдать

    Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,6Proof of conceptEPSS 18 %

    apple · installer30 янв. 2007 г.

  • CVE-2007-0612
    44В плане

    Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Expl

    ВысокаяCVSS 7,8Proof of conceptEPSS 43 %

    microsoft · ie31 янв. 2007 г.

  • CVE-2007-0646
    31Наблюдать

    Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to

    ВысокаяCVSS 7,1Proof of conceptEPSS 10 %

    apple · mac os x31 янв. 2007 г.