3137 matches found
Apple Mac OS X Installer Package Filename Format String (CVE-2007-0465)
Apple Computer Mac OS X is the operating system shipped with Apple Macintosh computers. The Installer component is an application included in Mac OS X systems which extracts and installs applications from installation packages. The installer provides features which allow developers to customize...
SILC Client Channel Name Format String Vulnerability
SILC Client is prone to a format string vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SILC Client Nickname Field Format String Vulnerability
This host has SILC Client/Toolkit installed, and is prone to Format String vulnerability. OpenVAS Vulnerability Test $Id: secpodsilcprdtsnicknameformatstringvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SILC Client Nickname Field Format String Vulnerability Authors: Nikita MR Copyright: Copyright ...
SILC Client < 1.1.8 Nickname Field Format String Vulnerability
SILC Client/Toolkit is prone to a format string vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE9 Security Update : mailman (YOU Patch Number 11243)
This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...
silc format string vulnerability
Multiple format string vulnerabilities on different messages parsing...
[SECURITY] [DSA 1877-1] New mysql-dfsg-5.0 packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1877-1 [email protected] http://www.debian.org/security/ Sebastien Delafond September 02, 2009 http://www.debian.org/security/faq -...
Format string
Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon...
CVE-2008-7074
Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon...
CVE-2008-7074
CVE-2008-7074 describes a format string vulnerability in MemeCode Software i.Scribe (versions 1.88 through 2.00 before Beta9) that is triggered by format specifiers in the signon message of server responses. The issue can be exploited by remote SMTP servers to cause a denial of service (crash) an...
CVE-2009-2916
Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...
CVE-2009-2916
The CVE-2009-2916 vulnerability affects 2K Games Vietcong 2 up to version 1.10, in the logs.dll CNS_AddTxt function. The underlying issue is a format string vulnerability in the nickname handling, enabling remote code execution. Exploitation is described as remote and network-based, with no authe...
CVE-2009-2916
Format string vulnerability in the CNSAddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary code via format string specifiers in the nickname...
CVE-2009-2191
CVE-2009-2191 is a format-string vulnerability in Mac OS X Login Window (affecting 10.4.11 and 10.5 up to 10.5.7; fixed in 10.5.8 via Security Update 2009-003). The issue arises from format specifiers in an application name, which can lead to arbitrary code execution or an application crash. Publ...
CVE-2009-2191
Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in an application name...
openSUSE Security Update : wireshark (wireshark-539)
wireshark: fixed crashes while reading capture files containing NetScreen data CVE-2009-0599, Tektronix K12 capture files CVE-2009-0600 and and a format string vulnerability CVE-2009-0601. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Format string
Format string vulnerability in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 nickname and 2 datafile fields in a joi...
CVE-2009-2548
This CVE (CVE-2009-2548) affects Armed Assault (ArmA) 1.14 and earlier, 1.16 beta, and Armed Assault II 1.02 and earlier. The issue is a format-string vulnerability in join-request handling where format specifiers in the nickname and datafile fields are improperly processed during error logging, ...
CVE-2009-2548
Format string vulnerability in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 nickname and 2 datafile fields in a joi...
Update Protection against Sun MySQL mysql_log Format String Vulnerability
A format string vulnerability exists in Sun Microsystems MySQL database server, a popular open-source implementation of a relational database. The flaw is due to insufficient input validation when processing database commands. Remote authenticated attackers could exploit this vulnerability by...