CVE-2009-0390: Improper Control of Generation of Code

Argument injection vulnerability in Enomaly Elastic Computing Platform ECP, formerly Enomalism, before 2.1.1 allows local users to send signals to arbitrary processes by populating the /tmp/enomalism2.pid file with command-line arguments for the kill program...

Microsoft Internet Explorer Argument Injection Vulnerability

This host has installed Internet Explorer and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiearginjvuln.nasl 4917 2017-01-02 14:43:20Z cfi $ Microsoft Internet Explorer Argument Injection Vulnerability Authors: Sharath S Copyright c 2008 SecPod,...

Google Chrome Argument Injection Vulnerability

This host has installed Google Chrome and is prone to argument injection vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Internet Explorer Argument Injection Vulnerability

This host has installed Internet Explorer and is prone to Argument Injection vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome "will ask for user permission" and "cannot launch...

Design/Logic Flaw

Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI...

CVE-2008-5750

Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI...

CVE-2008-5749

CVE-2008-5749 affects Google Chrome 1.0.154.36 on Windows XP SP3 and is an argument-injection vulnerability in the chromehtml URI via the --renderer-path option, enabling remote command execution. OpenVAS entries corroborate a Google Chrome argument-injection vulnerability; the core issue is the ...

CVE-2008-5750: Improper Control of Generation of Code

Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI...

CVE-2008-5749: Improper Control of Generation of Code

Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome "will ask for user permission" and "cannot launch...

CVE-2008-3007: Improper Input Validation

Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error...

MS08-055: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (955047)

The version of Microsoft Office running on the remote host is affected by an argument injection vulnerability. By convincing a user to click on a specially crafted OneNote URL, a remote attacker can exploit this to execute arbitrary code or view or change data with current user rights. C Tenable...

Design/Logic Flaw

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI...

CVE-2008-2841

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI...

CVE-2008-2841

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI...

CVE-2008-2841

Removed by vendor...

CVE-2008-2841: Improper Control of Generation of Code

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI...

CVE-2008-1965

Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrat...

CVE-2008-1965

Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrat...

CVE-2008-1965

IBM Lotus Expeditor's cai: URI handler in rcplauncher (used by Lotus Expeditor Client for Desktop 6.1.1/6.1.2 and Lotus Symphony) is vulnerable: a crafted cai: URI can inject -launcher to rcplauncher.exe, enabling remote code execution with the user's privileges. The attack relies on loading a sp...