# CVEs published 2005-11-05

13 CVEs were published on November 5, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2628](https://cve.now/CVE-2005-2628.md): Macromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier (no CVSS)
- [CVE-2005-2753](https://cve.now/CVE-2005-2753.md): Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes (no CVSS)
- [CVE-2005-2754](https://cve.now/CVE-2005-2754.md): Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Impro (no CVSS)
- [CVE-2005-2755](https://cve.now/CVE-2005-2755.md): Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing mo (no CVSS)
- [CVE-2005-2756](https://cve.now/CVE-2005-2756.md): Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that trig (no CVSS)
- [CVE-2005-3303](https://cve.now/CVE-2005-3303.md): The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbit (no CVSS)
- [CVE-2005-3500](https://cve.now/CVE-2005-3500.md): The tnef\_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infin (no CVSS)
- [CVE-2005-3501](https://cve.now/CVE-2005-3501.md): The cabd\_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to caus (no CVSS)
- [CVE-2005-3502](https://cve.now/CVE-2005-3502.md): attachment\_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file\_id param (no CVSS)
- [CVE-2005-3503](https://cve.now/CVE-2005-3503.md): chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check arguments for the GECOS fiel (no CVSS)
- [CVE-2005-3504](https://cve.now/CVE-2005-3504.md): Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute ar (no CVSS)
- [CVE-2005-3505](https://cve.now/CVE-2005-3505.md): Cross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject a (no CVSS)
- [CVE-2005-3506](https://cve.now/CVE-2005-3506.md): Cross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly earlier versions allows remote attackers to i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.