# CVEs published 2007-12-18

13 CVEs were published on December 18, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5862](https://cve.now/CVE-2007-5862.md): Java in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls and add or delete arbitrary Keychain items (no CVSS)
- [CVE-2007-6354](https://cve.now/CVE-2007-6354.md): Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that trigg (no CVSS)
- [CVE-2007-6355](https://cve.now/CVE-2007-6355.md): Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "i (no CVSS)
- [CVE-2007-6356](https://cve.now/CVE-2007-6356.md): exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG i (no CVSS)
- [CVE-2007-6433](https://cve.now/CVE-2007-6433.md): The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject (no CVSS)
- [CVE-2007-6434](https://cve.now/CVE-2007-6434.md): Linux kernel 2.6.23 allows local users to create low pages in virtual userspace memory and bypass mmap\_min\_addr protection via a crafted exe (no CVSS)
- [CVE-2007-6435](https://cve.now/CVE-2007-6435.md): Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers (no CVSS)
- [CVE-2007-6436](https://cve.now/CVE-2007-6436.md): Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attackers to execute arbit (no CVSS)
- [CVE-2007-6424](https://cve.now/CVE-2007-6424.md): registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote w (no CVSS)
- [CVE-2007-5583](https://cve.now/CVE-2007-5583.md): Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" responses or device reboot) (no CVSS)
- [CVE-2007-6283](https://cve.now/CVE-2007-6283.md): Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perfo (no CVSS)
- [CVE-2007-6417](https://cve.now/CVE-2007-6417.md): The shmem\_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumst (no CVSS)
- [CVE-2007-6418](https://cve.now/CVE-2007-6418.md): The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argument, which might allo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.