GLSA-200701-06 : w3m: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200701-06 w3m: Format string vulnerability w3m in -dump or -backend mode does not correctly handle printf format string specifiers in the Common Name CN field of an X.509 SSL certificate. Impact : An attacker could entice a user t...

CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

DEBIAN-CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0254

CVE-2007-0254 refers to a format-string vulnerability in the xine-ui project, specifically in the errors_create_window() function of errors.c. The flaw potentially allows arbitrary code execution via crafted input, as reported in multiple advisories for xine-ui. Affected versions include 0.99.4-e...

BolinTech DreamFTP (USER) Remote Buffer Overflow PoC

No description provided by source. / BolinTech DreamFTP USER buffer overflow The server does not correctly handle format string so sending a command like USER %13000 let us own EDX. Other values can also affect EAX & ECX &...

BolinTech DreamFTP Server - USER Remote Buffer Overflow (PoC)

BolinTech DreamFTP Server - USER Remote Buffer Overflow PoC / BolinTech DreamFTP USER buffer overflow The server does not correctly handle format string so sending a command like USER %13000 let us own EDX. Other values can also affect EAX & ECX This is only a POC but code execution is possible...

berlios.meta.txt

package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' = 1, 'UserOpts' =...

CVE-2007-0148

Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...

CVE-2007-0148

Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...

CVE-2007-0148

CVE-2007-0148 affects OmniGroup OmniWeb 5.5.1. Root cause: a format string vulnerability in the Javascript alert function that can be exploited by remote attackers to cause a crash or to execute arbitrary code. Impact includes denial of service and potential code execution with network-based acce...

FreeBSD : w3m -- format string vulnerability (9347d82d-9a66-11db-b271-000e35248ad7)

An anonymous person reports : w3m-0.5.1 crashes when using the -dump or -backend options to open a HTTPS URL with a SSL certificate where the CN contains '%n%n%n%n%n%n'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

DMA[2007-0104a] - 'iLife iPhoto Photocasing Format String Vulnerability'

DMA2007-0104a - 'iLife iPhoto Photocasing Format String Vulnerability' Author: Kevin Finisterre Vendors: http://www.apple.com Product: 'iLife 06 ?' References: http://www.digitalmunition.com/DMA2007-0104a.txt http://www.apple.com/ilife/iphoto/features/photocasting.html...

CVE-2007-0051

The CVE affects Apple iPhoto up to version 6.0.5 (and older than 6.0.6). A format-string vulnerability in the title of an iPhoto photocast RSS feed enables remote code execution. Underlying cause: crafted input with format specifiers is processed by iPhoto, leading to arbitrary code execution. Im...

USN-399-1: w3m vulnerabilities

A format string vulnerability was discovered in w3m. If a user were tricked into visiting an HTTPS URL protected by a specially crafted SSL certificate, an attacker could execute arbitrary code with user privileges...

CVE-2007-0017

VLC 0.7.0–0.8.6 contains a format-string vulnerability in the cdio_log_handler, vcd_log_handler, and cdio_log_handler functions (modules/access/cdda/access.c and modules/access/vcdx/access.c) that can be triggered by a malformed udp:// URI in an M3U file. The underlying issue is format string han...

CVE-2005-4817

The CVE-2005-4817 issue affects Textbased MSN Client (TMSNC) up to version before 0.2.5. It is a format-string vulnerability in ui.c that allows an attacker to cause a denial of service and possibly execute arbitrary code via injection into the wprintw function. Exploitation details are not provi...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...