CVEs published April 15, 2003
13 CVEs were published on April 15, 2003: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 13
- CVE-2003-0110The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Serve
- CVE-2003-0111The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allo
- CVE-2003-0133GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages.
- CVE-2003-0136psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file.
- CVE-2003-0163decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote
- CVE-2003-0171DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execu
- CVE-2003-0173xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges.
- CVE-2003-0196Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as disco
- CVE-2003-0198Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files.
- CVE-2003-0201Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG
- CVE-2003-0204KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, relate
- CVE-2003-0207ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files.
- CVE-2003-0208Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascr