2004 CVE Vulnerabilities

2,707 CVEs published in 2004.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2004-0507——Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service...
CVE-2004-0506——The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknow...
CVE-2004-0505——The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown att...
CVE-2004-0504——Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip ser...
CVE-2004-0503——Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media f...
CVE-2004-0502——Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img...
CVE-2004-0501——Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a re...
CVE-2004-1724——The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups direct...
CVE-2004-0234——Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as B...
CVE-2004-0490——cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path optio...
CVE-2004-0228——Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain pr...
CVE-2004-0226——Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or ex...
CVE-2004-0487——A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resour...
CVE-2004-0375——SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall ...
CVE-2004-0722——Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and po...
CVE-2004-0435——Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not proper...
CVE-2004-0433——Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine ...
CVE-2004-0432——ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allo...
CVE-2004-0763——Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Jav...
CVE-2004-0425——Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a lar...
CVE-2004-0233——Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwr...
CVE-2004-0765——The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the ho...
CVE-2004-0421——The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) ...
CVE-2004-0419——XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attacker...
CVE-2004-0762——Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensio...

Check if your code is affected by 2004 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now