# CVEs published 2006-02-14

17 CVEs were published on February 14, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0006](https://cve.now/CVE-2006-0006.md): Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Win (no CVSS)
- [CVE-2006-0382](https://cve.now/CVE-2006-0382.md): Apple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an undocumented system call. (no CVSS)
- [CVE-2006-0451](https://cve.now/CVE-2006-0451.md): Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (memory consu (no CVSS)
- [CVE-2006-0452](https://cve.now/CVE-2006-0452.md): dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (CPU and memory consum (no CVSS)
- [CVE-2006-0453](https://cve.now/CVE-2006-0453.md): The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (crash) via a certain "bad BER sequenc (no CVSS)
- [CVE-2005-3342](https://cve.now/CVE-2005-3342.md): noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) (no CVSS)
- [CVE-2006-0004](https://cve.now/CVE-2006-0004.md): Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive info (no CVSS)
- [CVE-2005-3057](https://cve.now/CVE-2005-3057.md): The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass (no CVSS)
- [CVE-2005-3058](https://cve.now/CVE-2005-3058.md): Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass the URL blocker via (no CVSS)
- [CVE-2006-0005](https://cve.now/CVE-2006-0005.md): Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set (no CVSS)
- [CVE-2006-0008](https://cve.now/CVE-2006-0008.md): The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up t (no CVSS)
- [CVE-2006-0013](https://cve.now/CVE-2006-0013.md): Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authe (no CVSS)
- [CVE-2006-0021](https://cve.now/CVE-2006-0021.md): Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet (no CVSS)
- [CVE-2006-0553](https://cve.now/CVE-2006-0553.md): PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" usi (no CVSS)
- [CVE-2006-0678](https://cve.now/CVE-2006-0678.md): PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows (no CVSS)
- [CVE-2005-3240](https://cve.now/CVE-2005-3240.md): Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by trick (no CVSS)
- [CVE-2006-0677](https://cve.now/CVE-2006-0677.md): telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service (server cr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.