# CVEs published 2004-10-16 27 CVEs were published on October 16, 2004: 0 critical, 0 high. Days are UTC. - [CVE-2003-0718](https://cve.now/CVE-2003-0718.md): The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (m (no CVSS) - [CVE-2004-0206](https://cve.now/CVE-2004-0206.md): Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 (no CVSS) - [CVE-2004-0207](https://cve.now/CVE-2004-0207.md): "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Win (no CVSS) - [CVE-2004-0208](https://cve.now/CVE-2004-0208.md): The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to (no CVSS) - [CVE-2004-0209](https://cve.now/CVE-2004-0209.md): Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remot (no CVSS) - [CVE-2004-0211](https://cve.now/CVE-2004-0211.md): The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denia (no CVSS) - [CVE-2004-0214](https://cve.now/CVE-2004-0214.md): Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote mal (no CVSS) - [CVE-2004-0216](https://cve.now/CVE-2004-0216.md): Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2004-0569](https://cve.now/CVE-2004-0569.md): The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system cras (no CVSS) - [CVE-2004-0572](https://cve.now/CVE-2004-0572.md): Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL w (no CVSS) - [CVE-2004-0574](https://cve.now/CVE-2004-0574.md): The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2 (no CVSS) - [CVE-2004-0575](https://cve.now/CVE-2004-0575.md): Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Ed (no CVSS) - [CVE-2004-0774](https://cve.now/CVE-2004-0774.md): RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memo (no CVSS) - [CVE-2004-0804](https://cve.now/CVE-2004-0804.md): Vulnerability in tif\_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that ca (no CVSS) - [CVE-2004-0815](https://cve.now/CVE-2004-0815.md): The unix\_clean\_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, w (no CVSS) - [CVE-2004-0835](https://cve.now/CVE-2004-0835.md): MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table (no CVSS) - [CVE-2004-0836](https://cve.now/CVE-2004-0836.md): Buffer overflow in the mysql\_real\_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a (no CVSS) - [CVE-2004-0837](https://cve.now/CVE-2004-0837.md): MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that sim (no CVSS) - [CVE-2004-0840](https://cve.now/CVE-2004-0840.md): The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit E (no CVSS) - [CVE-2004-0843](https://cve.now/CVE-2004-0843.md): Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and t (no CVSS) - [CVE-2004-0844](https://cve.now/CVE-2004-0844.md): Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages (no CVSS) - [CVE-2004-0845](https://cve.now/CVE-2004-0845.md): Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content (no CVSS) - [CVE-2004-0846](https://cve.now/CVE-2004-0846.md): Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a m (no CVSS) - [CVE-2004-0885](https://cve.now/CVE-2004-0885.md): The mod\_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remot (no CVSS) - [CVE-2004-0938](https://cve.now/CVE-2004-0938.md): FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute witho (no CVSS) - [CVE-2004-0958](https://cve.now/CVE-2004-0958.md): php\_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC varia (no CVSS) - [CVE-2004-0959](https://cve.now/CVE-2004-0959.md): rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that cau (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2004-10-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.