CVE-2006-5084

Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5..79 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference...

CVE-2006-5033

Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding...

CVE-2006-5033

Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding...

Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String

Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String source: https://www.securityfocus.com/bid/20218/info Skype is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before using it in the format-specification argume...

GNU Mailutils imap4d 0.6 (search) Remote Format String Exploit (fbsd)

Exploit for bsd platform in category remote exploits ===================================================================== GNU Mailutils imap4d 0.6 search Remote Format String Exploit fbsd ===================================================================== / Copyright c 2005 Rosiello Security...

Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String

source: https://www.securityfocus.com/bid/20218/info Skype is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before using it in the format-specification argument of a formatted-printing function. Exploiting this issue allows...

Format string

DISPUTED Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable."...

CVE-2006-2191

Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable...

CVE-2006-2191

Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable...

CVE-2006-2191

Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable...

CVE-2006-2191

The CVE-2006-2191 entry concerns a format-string vulnerability in Mailman prior to version 2.1.9, which could allow an attacker to execute arbitrary code via unspecified vectors. The vulnerability is documented across multiple advisories and OpenVAS/Nessus entries, and several sources explicitly ...

CVE-2006-2191

Removed by vendor...

Symantec Antivirus format string security vulnerability

Format string vulnerability in Virus Alert Notification Message templates...

PT-2006-3170 · Gnu · Mailman

Name of the Vulnerable Software and Affected Versions: Mailman versions prior to 2.1.9 Description: A format string issue allows attackers to execute arbitrary code. The vendor has disputed this issue, stating it is unexploitable. Recommendations: For versions prior to 2.1.9, update to version...

AIX 5.1 : IY23846

The remote host is missing AIX Critical Security Patch number IY23846 SECURITY: Format string vulnerability in CDE ToolTalk server. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CVE-2006-4802

Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than...

CVE-2006-4802

CVE-2006-4802 describes a format string vulnerability in the Real Time Virus Scan service of Symantec AntiVirus Corporate Edition (8.1–10.0) and Client Security (1.x–3.0). The flaw allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, noted...

CVE-2006-3454

Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in 1 Tamper Protection and 2 Virus Alert Notification messages...

CVE-2006-3454

Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in 1 Tamper Protection and 2 Virus Alert Notification messages...

CVE-2006-3454

CVE-2006-4802 details a second format string vulnerability in the Real Time Virus Scan service and alert notification path of Symantec Antivirus Corporate Edition 8.1–10.0 and Symantec Client Security 1.x–3.0 (a vector distinct from CVE-2006-3454). Local users can potentially execute arbitrary co...