93 matches found
OpenBSD 4.6 NetBSD 5.0.1 - printf(1) Format String Parsing Denial of Service
OpenBSD 4.6 NetBSD 5.0.1 - printf1 Format String Parsing Denial of Service source: https://www.securityfocus.com/bid/36884/info OpenBSD and NetBSD are prone to a denial-of-service vulnerability because they fail to properly parse format strings to the 'printf1' function. An attacker can exploit...
DEBIAN-CVE-2009-2855
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...
Secunia Research: Microsoft Excel String Parsing Integer Overflow Vulnerability
====================================================================== Secunia Research 09/06/2009 - Microsoft Excel String Parsing Integer Overflow - ====================================================================== Table of Contents Affected...
DEBIAN-CVE-2009-0490
Stack-based buffer overflow in the Stringparse::getnonspacequoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .gro file containing a long string...
SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-007 Advisory Title: Microsoft Office Malformed String Parsing Vulnerability Author : Elia Florio / [email protected] Release Date :...
Microsoft Office String Parsing Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. This issue is due to a failure of the software to properly handle malformed strings in Office documents. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of targeted users...
Microsoft Office string parsing vulnerability
Overview Microsoft Office fails to properly parse strings. This vulnerability could allow a remote attacker to execute arbitrary code. Description Microsoft Office applications fail to properly parse strings. When an Office document containing malformed string is opened with an Office application...
GLSA-200607-04 : PostgreSQL: SQL injection
The remote host is affected by the vulnerability described in GLSA-200607-04 PostgreSQL: SQL injection PostgreSQL contains a flaw in the string parsing routines that allows certain backslash-escaped characters to be bypassed with some multibyte character encodings. This vulnerability was discover...
PostgreSQL: SQL injection
Background PostgreSQL is an open source object-relational database management system. Description PostgreSQL contains a flaw in the string parsing routines that allows certain backslash-escaped characters to be bypassed with some multibyte character encodings. This vulnerability was discovered by...
Jabberd Jabber instant messaging server buffer overflow
Multiple buffer overflows on JID string parsing in jid.c...
Buffer overflow in libX11 for OpenUnix
Buffer overflow during -xrm command string argument parsing...
