CVE-2012-3406

The vfprintf function in stdio-common/vfprintf.c in GNU C Library aka glibc 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFYSOURCE format-string...

CVE-2011-4930

Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service condorschedd daemon and failure to launch jobs and possibly execute arbitrary code via...

CVE-2012-3404

The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library aka glibc 2.12 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFYSOURCE format-string protection mechanism and cause a denial of service stack...

Solaris rwalld Format String - Ver2 (CVE-2002-0573)

A format string vulnerability has been reported in Sun Solaris. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Fedora 19 : rubygem-actionmailer-3.2.13-2.fc19 / rubygem-actionpack-3.2.13-4.fc19 / etc (2014-0970)

Avoid potential format string vulnerabilities where user-provided data is interpolated into the log message before String% is called. CVE-2013-4389. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

CVE-2013-7296

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted PDF file...

Format string

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted PDF file...

CVE-2013-7296

The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service segmentation fault and application crash via a crafted PDF file...

CVE-2013-1886

Format string vulnerability in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in...

Format string

Format string vulnerability in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in...

CVE-2013-1886

CVE-2013-1886 is a format-string vulnerability in Red Hat Certificate System (RHCS) pki-tps (token processing system). The flaw, affecting RHCS 8.1 and possibly Dogtag Certificate System 9–10, could allow a remote authenticated user to crash the Apache HTTP Server or potentially execute arbitrary...

CVE-2013-1886

Format string vulnerability in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in...

Fedora 20 : qt3-3.3.8b-56.fc20 (2013-22847)

This update fixes CVE-2013-4549 XML Entity Expansion Denial of Service in Qt 3. See the Qt Project Security Advisory for details: http://lists.qt-project.org/pipermail/announce/2013-December/000036.ht ml In addition, this update fixes : - QTBUG-35459, a too low character limit for XML entities...

Fedora 19 : qt3-3.3.8b-56.fc19 (2013-22883)

This update fixes CVE-2013-4549 XML Entity Expansion Denial of Service in Qt 3. See the Qt Project Security Advisory for details: http://lists.qt-project.org/pipermail/announce/2013-December/000036.ht ml In addition, this update fixes : - QTBUG-35459, a too low character limit for XML entities...

Fedora 19 : mingw-poppler-0.22.5-2.fc19 (2014-0204)

Fix DoS due to a format string error. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

ACE Stream Media 2.1 - (acestream://) Format String Exploit PoC

Exploit for multiple platform in category local exploits ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page: http://www.acestream.org Affected version: Ace Player HD 2.1.9 VLC 2.0.5 Summary: Ace Stream is an innovative multimedia platform of a new...

NetWin SurgeMail Webmail Server page Parameter Format String - Ver2 (CVE-2008-1055)

A format string vulnerability has been reported in NetWin SurgeMail and WebMail. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Solaris rwalld Format String - Ver2 (CVE-2002-0573)

A format string vulnerability has been reported in Sun Solaris. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Fedora 20 : poppler-0.24.3-3.fc20 (2014-0156)

Use correct format string for a syntax error. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Ace Stream Media "acestream://"格式字符串漏洞

Ace Stream Media是新一代的创新媒体平台。 该漏洞是由于解析“acestream://”URI时格式字符串错误，攻击者可以利用通过含“acestream://”流URI的播放列表文件漏洞破坏内存。 0 Ace Stream Media 2.x 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://acestream.org/ ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page:...