2793 matches found
CVE-2004-1876
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...
CVE-2005-1187
Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability...
CVE-2005-1187: Undefined Security Weakness
Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability...
PT-2005-2203 · X Ways · Winhex
Name of the Vulnerable Software and Affected Versions: WinHex version 12.05 SR-14 Description: A heap-based buffer overflow may occur due to a long file name argument, potentially allowing attackers to execute arbitrary code. However, since this issue is in the command line of an unprivileged...
WinHex editor buffer overflow
Buffer overflow on oversized file name...
USN-90-1: Imagemagick vulnerability
Tavis Ormandy discovered a format string vulnerability in ImageMagick's file name handling. Specially crafted file names could cause a program using ImageMagick to crash, or possibly even cause execution of arbitrary code. Since ImageMagick can be used in custom printing systems, this also might...
gaim instant messanger DoS
Application crashes on receiving file with with parenthesis in the name and during HTML parsing...
CVE-2005-0439
Buffer overflow in the decodepost function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names...
Winamp < 5.03 Filename Handler Local Buffer Overflow
The remote host is using Winamp, a popular media player that handles many files format mp3, wavs and more.... The remote version of this software is vulnerable to a local buffer overrun when handling a large file name. This buffer overflow may be exploited to execute arbitrary code on the remote...
CVE-2004-1327
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension...
DEBIAN-CVE-2004-2269
Stack-based buffer overflow in pads.c in Passive Asset Detection System Pads might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability...
CVE-2004-2269
Stack-based buffer overflow in pads.c in Passive Asset Detection System Pads might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability...
CVE-2004-2661
Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information CGI source code...
wodftpcrash.txt
AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCT WodFtpDLX is an ActiveX component that supports encrypted and non-encrypted FTP access to the servers for transferring files. It can be used in various programs, scripts, web applications to connect to F...
InnerMedia DynaZip library vulnerable to buffer overflow via long file names
Overview Releases prior to version 5.00.04 of the InnerMedia DynaZip compression library contain a buffer overflow that may allow a remote attacker to execute arbitrary code. Description DynaZip is a popular compression library for the Microsoft Windows platform. A bounds checking deficiency in...
FreeBSD : rssh -- file name disclosure bug (165)
The following package needs to be updated: rssh %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga4815970c5cc11d88898000d6111a684.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...
CVE-2001-1351: Undefined Security Weakness
Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers...
Mozilla < 0.9 Predictable Temporary File Name File Deletion (deprecated)
Binary data 1746.prm...