# CVEs published 2008-04-04

22 CVEs were published on April 4, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1154](https://cve.now/CVE-2008-1154.md): The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM (no CVSS)
- [CVE-2008-1681](https://cve.now/CVE-2008-1681.md): Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin (no CVSS)
- [CVE-2008-1682](https://cve.now/CVE-2008-1682.md): PHP remote file inclusion vulnerability in quiz/common/db\_config.inc.php in the Online FlashQuiz (com\_onlineflashquiz) 1.0.2 component for J (no CVSS)
- [CVE-2008-1013](https://cve.now/CVE-2008-1013.md): Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute a (no CVSS)
- [CVE-2008-1014](https://cve.now/CVE-2008-1014.md): Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information (no CVSS)
- [CVE-2008-1015](https://cve.now/CVE-2008-1015.md): Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2008-1016](https://cve.now/CVE-2008-1016.md): Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbitrary code via a craf (no CVSS)
- [CVE-2008-1017](https://cve.now/CVE-2008-1017.md): Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5 allows remote attack (no CVSS)
- [CVE-2008-1018](https://cve.now/CVE-2008-1018.md): Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4A movie with a malfor (no CVSS)
- [CVE-2008-1019](https://cve.now/CVE-2008-1019.md): Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted (no CVSS)
- [CVE-2008-1020](https://cve.now/CVE-2008-1020.md): Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2008-1021](https://cve.now/CVE-2008-1021.md): Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute (no CVSS)
- [CVE-2008-1022](https://cve.now/CVE-2008-1022.md): Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted VR movie with an (no CVSS)
- [CVE-2008-1023](https://cve.now/CVE-2008-1023.md): Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2003-1556](https://cve.now/CVE-2003-1556.md): Cross-site scripting (XSS) vulnerability in cc\_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2003-1557](https://cve.now/CVE-2003-1557.md): Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-5661](https://cve.now/CVE-2007-5661.md): The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate the DLL files that are (no CVSS)
- [CVE-2008-0555](https://cve.now/CVE-2008-0555.md): The ExpandCert function in Apache-SSL before apache\_1.3.41+ssl\_1.59 does not properly handle (1) '/' and (2) '=' characters in a Distinguish (no CVSS)
- [CVE-2008-0884](https://cve.now/CVE-2008-0884.md): The Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp-lspp-eal4-config-hp packages before 0.65-2 (no CVSS)
- [CVE-2008-1373](https://cve.now/CVE-2008-1373.md): Buffer overflow in the gif\_read\_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large cod (no CVSS)
- [CVE-2008-1374](https://cve.now/CVE-2008-1374.md): Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to (no CVSS)
- [CVE-2008-1680](https://cve.now/CVE-2008-1680.md): PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.