# CVEs published 2004-12-22

72 CVEs were published on December 22, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0946](https://cve.now/CVE-2004-0946.md): rquotad in nfs-utils (rquota\_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads (no CVSS)
- [CVE-2004-1019](https://cve.now/CVE-2004-1019.md): The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbit (no CVSS)
- [CVE-2004-1028](https://cve.now/CVE-2004-1028.md): Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modif (no CVSS)
- [CVE-2004-1054](https://cve.now/CVE-2004-1054.md): Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the (no CVSS)
- [CVE-2004-1056](https://cve.now/CVE-2004-1056.md): Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local (no CVSS)
- [CVE-2004-1058](https://cve.now/CVE-2004-1058.md): Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/ (no CVSS)
- [CVE-2004-1065](https://cve.now/CVE-2004-1065.md): Buffer overflow in the exif\_read\_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2004-1125](https://cve.now/CVE-2004-1125.md): Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3 (no CVSS)
- [CVE-2004-1138](https://cve.now/CVE-2004-1138.md): VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed (no CVSS)
- [CVE-2004-1149](https://cve.now/CVE-2004-1149.md): Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows (no CVSS)
- [CVE-2004-1152](https://cve.now/CVE-2004-1152.md): Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an (no CVSS)
- [CVE-2004-1153](https://cve.now/CVE-2004-1153.md): Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application cr (no CVSS)
- [CVE-2004-1154](https://cve.now/CVE-2004-1154.md): Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of serv (no CVSS)
- [CVE-2004-1172](https://cve.now/CVE-2004-1172.md): Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, a (no CVSS)
- [CVE-2004-1187](https://cve.now/CVE-2004-1187.md): Heap-based buffer overflow in the pnm\_get\_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows (no CVSS)
- [CVE-2004-1188](https://cve.now/CVE-2004-1188.md): The pnm\_get\_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify t (no CVSS)
- [CVE-2004-1254](https://cve.now/CVE-2004-1254.md): WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long f (no CVSS)
- [CVE-2004-1255](https://cve.now/CVE-2004-1255.md): Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text file that is converted (no CVSS)
- [CVE-2004-1256](https://cve.now/CVE-2004-1256.md): Multiple buffer overflows in the (1) event\_text and (2) event\_specific functions in abc2midi 2004.12.04 allow remote attackers to execute ar (no CVSS)
- [CVE-2004-1257](https://cve.now/CVE-2004-1257.md): Buffer overflow in the process\_abc function in abc.c for abc2mtex 1.6.1 allows remote attackers to execute arbitrary code via crafted ABC fi (no CVSS)
- [CVE-2004-1258](https://cve.now/CVE-2004-1258.md): Buffer overflow in the put\_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC fil (no CVSS)
- [CVE-2004-1259](https://cve.now/CVE-2004-1259.md): Multiple buffer overflows in the handle\_directive function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute arbitrary code via c (no CVSS)
- [CVE-2004-1260](https://cve.now/CVE-2004-1260.md): Multiple buffer overflows in the (1) write\_heading function in subs.cpp or (2) trim\_title function in parse.cpp for abctab2ps 1.6.3 allow re (no CVSS)
- [CVE-2004-1261](https://cve.now/CVE-2004-1261.md): Multiple buffer overflows in the preparse function in asp2php 0.76.23 allow remote attackers to execute arbitrary code via crafted ASP scrip (no CVSS)
- [CVE-2004-1262](https://cve.now/CVE-2004-1262.md): Buffer overflow in the bsb\_open\_header function in libbsb for bsb2ppm 0.0.6 allows remote attackers to execute arbitrary code via crafted BS (no CVSS)
- [CVE-2004-1263](https://cve.now/CVE-2004-1263.md): changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environm (no CVSS)
- [CVE-2004-1264](https://cve.now/CVE-2004-1264.md): Buffer overflow in the simplify\_path function in config.c for ChBg 1.5 allows remote attackers to execute arbitrary code via a crafted chbg (no CVSS)
- [CVE-2004-1265](https://cve.now/CVE-2004-1265.md): Buffer overflow in the readObjectChunk function in 3dsimp.cpp for the convex-tool program in Convex 3D 0.8pre1 allows remote attackers to ex (no CVSS)
- [CVE-2004-1266](https://cve.now/CVE-2004-1266.md): Buffer overflow in the get\_field\_headers function in csv2xml.cpp for csv2xml 0.5.1 allows remote attackers to execute arbitrary code via a c (no CVSS)
- [CVE-2004-1267](https://cve.now/CVE-2004-1267.md): Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbi (no CVSS)
- [CVE-2004-1268](https://cve.now/CVE-2004-1268.md): lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling th (no CVSS)
- [CVE-2004-1269](https://cve.now/CVE-2004-1269.md): lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which c (no CVSS)
- [CVE-2004-1270](https://cve.now/CVE-2004-1270.md): lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, doe (no CVSS)
- [CVE-2004-1271](https://cve.now/CVE-2004-1271.md): Buffer overflow in the dxfin function in d.c for dxfscope 0.2 allows remote attackers to execute arbitrary code via a crafted DXF file. (no CVSS)
- [CVE-2004-1272](https://cve.now/CVE-2004-1272.md): Buffer overflow in the save\_embedded\_address function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2004-1273](https://cve.now/CVE-2004-1273.md): Buffer overflow in the DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file cont (no CVSS)
- [CVE-2004-1274](https://cve.now/CVE-2004-1274.md): The DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a filename w (no CVSS)
- [CVE-2004-1275](https://cve.now/CVE-2004-1275.md): Buffer overflow in the remove\_quote function in convert.c for html2hdml 1.0.3 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2004-1276](https://cve.now/CVE-2004-1276.md): IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating tempor (no CVSS)
- [CVE-2004-1277](https://cve.now/CVE-2004-1277.md): The download\_selection\_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files (no CVSS)
- [CVE-2004-1278](https://cve.now/CVE-2004-1278.md): Buffer overflow in the switch\_voice function in parse.c for jcabc2ps 20040902 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2004-1279](https://cve.now/CVE-2004-1279.md): Buffer overflow in the get\_file\_list\_stdin function in jpegtoavi 1.5 allows remote attackers to execute arbitrary code via a crafted set of (no CVSS)
- [CVE-2004-1280](https://cve.now/CVE-2004-1280.md): The gui\_popup\_view\_fly function in gui\_tview\_popup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via (no CVSS)
- [CVE-2004-1281](https://cve.now/CVE-2004-1281.md): The ftp\_retr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via .. (no CVSS)
- [CVE-2004-1282](https://cve.now/CVE-2004-1282.md): Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary code via a crafted mes (no CVSS)
- [CVE-2004-1283](https://cve.now/CVE-2004-1283.md): Buffer overflow in the Mesh::type method in mesh.c for the mview program in Mesh Viewer 0.2.2 allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2004-1284](https://cve.now/CVE-2004-1284.md): Buffer overflow in the find\_next\_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2004-1285](https://cve.now/CVE-2004-1285.md): Buffer overflow in the get\_header function in asf\_mmst\_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2004-1286](https://cve.now/CVE-2004-1286.md): Buffer overflow in the auto\_filter\_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to ex (no CVSS)
- [CVE-2004-1287](https://cve.now/CVE-2004-1287.md): Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a (no CVSS)
- [CVE-2004-1288](https://cve.now/CVE-2004-1288.md): Buffer overflow in the parse\_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary code via a crafted SXW (no CVSS)
- [CVE-2004-1289](https://cve.now/CVE-2004-1289.md): Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get\_holiday function in readfile.c for pcal 4.7.1 allow remo (no CVSS)
- [CVE-2004-1290](https://cve.now/CVE-2004-1290.md): Buffer overflow in the process\_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary code via a crafted P (no CVSS)
- [CVE-2004-1291](https://cve.now/CVE-2004-1291.md): Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, which overwrites the (no CVSS)
- [CVE-2004-1292](https://cve.now/CVE-2004-1292.md): Buffer overflow in the parse\_emelody function in parse\_emelody.c for ringtonetools 2.22 allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2004-1293](https://cve.now/CVE-2004-1293.md): Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2004-1294](https://cve.now/CVE-2004-1294.md): The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file name (no CVSS)
- [CVE-2004-1295](https://cve.now/CVE-2004-1295.md): The slip\_down function in slip.c for the uml\_net program in uml-utilities 20030903, when uml\_net is installed setuid root, does not verify w (no CVSS)
- [CVE-2004-1297](https://cve.now/CVE-2004-1297.md): Buffer overflow in the process\_font\_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a cra (no CVSS)
- [CVE-2004-1298](https://cve.now/CVE-2004-1298.md): Buffer overflow in the parse function in vb2c.c for vb2c 0.02 allows remote attackers to execute arbitrary code via a crafted FRM file. (no CVSS)
- [CVE-2004-1299](https://cve.now/CVE-2004-1299.md): Buffer overflow in the get\_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web (no CVSS)
- [CVE-2004-1300](https://cve.now/CVE-2004-1300.md): Buffer overflow in the open\_aiff\_file function in demux\_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2004-1301](https://cve.now/CVE-2004-1301.md): Buffer overflow in the book\_format\_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2004-1302](https://cve.now/CVE-2004-1302.md): The id3tag\_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes i (no CVSS)
- [CVE-2004-1303](https://cve.now/CVE-2004-1303.md): Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP res (no CVSS)
- [CVE-2004-1304](https://cve.now/CVE-2004-1304.md): Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF (no CVSS)
- [CVE-2004-1308](https://cve.now/CVE-2004-1308.md): Integer overflow in (1) tif\_dirread.c and (2) tif\_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2004-1309](https://cve.now/CVE-2004-1309.md): Heap-based buffer overflow in the demux\_open\_bmp function in demux\_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2004-1310](https://cve.now/CVE-2004-1310.md): Stack-based buffer overflow in the asf\_mmst\_streaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2004-1311](https://cve.now/CVE-2004-1311.md): Integer overflow in the real\_setup\_and\_get\_header function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2004-1313](https://cve.now/CVE-2004-1313.md): The Smc.exe process in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before invoking help, which al (no CVSS)
- [CVE-2004-1314](https://cve.now/CVE-2004-1314.md): Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is know (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-12-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.