6852 matches found
CVE-2004-2779
id3utf16deserialize in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service DoS...
CVE-2004-2779
CVE-2004-2779 affects libid3tag (id3_utf16_deserialize in utf16.c) up through version 0.15.1b, where ID3v2 tags encoded in UTF-16 with an odd number of bytes cause an endless memory allocation loop leading to DoS. Several Nessus/IDS feeds reference this with impacted packages (libid3tag in variou...
Command injection
Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as have an...
CVE-2017-5078
CVE-2017-5078 is listed in Arch Linux ASA-201707-4 as a vulnerability in qt5-webengine (Chromium-based) before 5.9.1-1, described as an arbitrary command execution via a possible command injection in the mailto handling component of the Chromium browser. The advisory indicates multiple issues in ...
CVE-2004-0861
CVE-2004-0861 is rejected and not used; this candidate does not represent an active vulnerability entry.