Skulltag 0.96f - Version String Remote Format String (PoC)

Luigi Auriemma Application: Skulltag http://www.skulltag.com Versions: = 0.96f Platforms: Windows Bug: format string Exploitation: remote, versus server Date: 23 Apr 2006 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org Backup:...

Format string

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

DEBIAN-CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

CVE-2006-1905 affects xine (xiTK, xiTk/main.c) with multiple format-string vulnerabilities in the xine UI when processing a long filename on an EXTINFO line in a playlist. A remote attacker could execute arbitrary code via format specifiers. Affected software is xine 0.99.3 (and related CVE-2006-...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1905

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file...

CVE-2006-1840

Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service crash via the 1 load, 2 spy and 3 bomb functions...

Format string

Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service crash via the 1 load, 2 spy and 3 bomb functions...

CVE-2006-1840

Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service crash via the 1 load, 2 spy and 3 bomb functions...

CVE-2006-1840

CVE-2006-1840 – Normal mode Affected software: Empire Server (pre-4.3.1). Vulnerability: multiple format string vulnerabilities in the functions load, spy, and bomb. Impact: denial of service (crash). Root cause: format string handling issue in the specified functions. Exploitation: not described...

Xine 0.91.0 - Playlist Handling Remote Format String

Xine 0.91.0 - Playlist Handling Remote Format String source: https://www.securityfocus.com/bid/17579/info The xine package is reported prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted playlist files. An attacker can exploit this...

[Full-disclosure] Remote Xine Format String Vulnerability

/ $ An open security advisory 16 - Xine Media Player Format String Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com -+- www.open-security.org 2: Bug Released: April 18th 2006 3: Bug Impact Rate: Undefined 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be...

Xine 0.9/1.0 - Playlist Handling Remote Format String

source: https://www.securityfocus.com/bid/17579/info The xine package is reported prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted playlist files. An attacker can exploit this vulnerability by crafting a malicious file that contains...

xine -- multiple remote string vulnerabilities

c0ntexb reports: There are 2 format string bugs in the latest version of Xine that could be exploited by a malicious person to execute code on the system of a remote user running the media player against a malicious playlist file. By passing a format specifier in the path of a file that is embedd...

SUSE-SA:2006:020: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:020 clamav. Clamav was updated to version 0.88.1 to fix the following security problems: - An integer overflow in the PE header parser CVE-2006-1614. - Format string bugs in the logging code could potentially be exploited to execu...

Multiple ClamAV Clam Antivirus security vulnerabilities

Integer overflow on PE files parsing, format string vulnerabilitry, unallocated memory access...

GLSA-200604-05 : Doomsday: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-05 Doomsday: Format string vulnerability Luigi Auriemma discovered that Doomsday incorrectly implements formatted printing. Impact : A remote attacker could exploit these vulnerabilities to execute arbitrary code with the...