2665 matches found
vxTftpSrv TFTP server for Pocket PC buffer overflow
Buffer overflow on oversized file name...
CVE-2005-2694
Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary .tmp file that contains an entry with a long file name...
CVE-2005-2694
Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary .tmp file that contains an entry with a long file name...
CVE-2005-2694: Undefined Security Weakness
Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary .tmp file that contains an entry with a long file name...
CVE-2004-2432: Undefined Security Weakness
WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service crash via a request for a file with a long file name, possibly due to an off-by-one buffer overflow...
gforgeexec.txt
-------------------------------------------------------------------------- Vendor : Gforge http://gforge.org Product : gforge Affected versions : = 4.0 & Debian pkg 3.1-30 Vulnerability : Input validation flaw Problem-Type : remote Severity : High, arbitrary command execution Author : Filippo Spi...
CVE-2004-2269: Undefined Security Weakness
Stack-based buffer overflow in pads.c in Passive Asset Detection System Pads might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability...
CVE-2005-1269
Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...
Mandrake Linux Security Advisory : gedit (MDKSA-2005:102)
A vulnerability was discovered in gEdit where it was possible for an attacker to create a file with a carefully crafted name which, when opened, executed arbitrary code on the victim's computer. It is highly unlikely that a user would open such a file, due to the file name, but could possibly be...
Moderate: Red Hat Security Advisory: gedit security update
An updated gedit package that fixes a file name format string vulnerability is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team gEdit is a small text editor designed specifically for the GNOME GUI desktop. A file name format string...
Sony Ericsson P900 Beamer - Malformed File Name Handling Denial of Service
Sony Ericsson P900 Beamer - Malformed File Name Handling Denial of Service source: https://www.securityfocus.com/bid/13782/info Sony Ericsson P900 handset is affected by a remote denial of service vulnerability. This issue arises because the application fails to perform boundary checks prior to...
CVE-2004-1876
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon clamd before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name...
CVE-2003-1144
Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...
CVE-2005-1187
Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability...
PT-2005-2203 · X Ways · Winhex
Name of the Vulnerable Software and Affected Versions: WinHex version 12.05 SR-14 Description: A heap-based buffer overflow may occur due to a long file name argument, potentially allowing attackers to execute arbitrary code. However, since this issue is in the command line of an unprivileged...
CVE-2005-1187: Undefined Security Weakness
Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability...
WinHex editor buffer overflow
Buffer overflow on oversized file name...
USN-90-1: Imagemagick vulnerability
Tavis Ormandy discovered a format string vulnerability in ImageMagick's file name handling. Specially crafted file names could cause a program using ImageMagick to crash, or possibly even cause execution of arbitrary code. Since ImageMagick can be used in custom printing systems, this also might...