# CVEs published 2004-12-10

21 CVEs were published on December 10, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0915](https://cve.now/CVE-2004-0915.md): Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide (no CVSS)
- [CVE-2004-0993](https://cve.now/CVE-2004-0993.md): Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary (no CVSS)
- [CVE-2004-1026](https://cve.now/CVE-2004-1026.md): Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow re (no CVSS)
- [CVE-2004-1067](https://cve.now/CVE-2004-1067.md): Off-by-one error in the mysasl\_canon\_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote (no CVSS)
- [CVE-2004-1122](https://cve.now/CVE-2004-1122.md): Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof (no CVSS)
- [CVE-2004-1155](https://cve.now/CVE-2004-1155.md): Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another wind (no CVSS)
- [CVE-2004-1156](https://cve.now/CVE-2004-1156.md): Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window in (no CVSS)
- [CVE-2004-1157](https://cve.now/CVE-2004-1157.md): Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window (no CVSS)
- [CVE-2004-1158](https://cve.now/CVE-2004-1158.md): Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one (no CVSS)
- [CVE-2004-1160](https://cve.now/CVE-2004-1160.md): Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window (no CVSS)
- [CVE-2004-1161](https://cve.now/CVE-2004-1161.md): rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended (no CVSS)
- [CVE-2004-1162](https://cve.now/CVE-2004-1162.md): The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users t (no CVSS)
- [CVE-2004-1163](https://cve.now/CVE-2004-1163.md): Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2004-1164](https://cve.now/CVE-2004-1164.md): The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via (no CVSS)
- [CVE-2004-1165](https://cve.now/CVE-2004-1165.md): Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") befo (no CVSS)
- [CVE-2004-1166](https://cve.now/CVE-2004-1166.md): CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP comma (no CVSS)
- [CVE-2004-1167](https://cve.now/CVE-2004-1167.md): mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows remote attackers to (no CVSS)
- [CVE-2004-1168](https://cve.now/CVE-2004-1168.md): Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2004-1169](https://cve.now/CVE-2004-1169.md): MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a (no CVSS)
- [CVE-2004-1170](https://cve.now/CVE-2004-1170.md): a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename. (no CVSS)
- [CVE-2004-1171](https://cve.now/CVE-2004-1171.md): KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol hand (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.