Buffer overflow

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line...

CVE-2009-0179

libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service application crash by loading an XM file...

CVE-2009-0181

Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters...

CVE-2009-0182

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line...

CVE-2009-0181

VUPlayer is affected by CVE-2009-0181 due to a buffer overflow in handling input file content, demonstrated by a file composed entirely of 'A' characters. The OpenVAS entry also flags a buffer overflow in the VUPlayer .asx playlist handling. Reported impact in the NVD refers to an unknown impact ...

CVE-2009-0181

Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters...

CVE-2009-0181: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters...

Fedora 9 : xterm-238-1.fc9 (2009-0059)

This update fixes the following security issue: CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related...

Adobe Reader: User-assisted execution of arbitrary code

Background Adobe Reader formerly Adobe Acrobat Reader is a closed-source PDF reader. Description An unspecified vulnerability can be triggered by a malformed PDF document, as demonstrated by 2008-HI2.pdf CVE-2008-2549. Peter Vreugdenhil, Dyon Balding, Will Dormann, Damian Frizza, and Greg MacManu...

GLSA-200901-06 : Tremulous: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200901-06 Tremulous: User-assisted execution of arbitrary code It has been reported that Tremulous includes a vulnerable version of the ioQuake3 engine GLSA 200605-12, CVE-2006-2236. Impact : A remote attacker could entice a user ...

CVE-2008-5868

CVE-2008-5868 describes a stack-based buffer overflow in IntelliTamper versions 2.07 and 2.08. The overflow can be triggered by a long ProxyLogin value in a configuration (.cfg) file, potentially allowing user-assisted attackers to execute arbitrary code. The description enumerates the vulnerable...

Crlf injection

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...

CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences...

CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences...

CVE-2008-2383

The CVE-2008-2383 entry documents a CRLF injection vulnerability in xterm. Attackers may exploitLF characters surrounding a command name within a DECRQSS (Device Control Request Status String) escape sequence in a text file to coerce arbitrary command execution. The issue is related to earlier CV...

CVE-2008-5754

Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file aka Session-File with a long second line, possibly a related issue to CVE-2008-5753...

CVE-2008-5756

The CVE-2008-5756 issue affects BreakPoint Software Hex Workshop 5.1.4. A buffer overflow occurs when parsing a Color Mapping (.cmap) file due to a long mapping reference, enabling user-assisted DoS and potentially arbitrary code execution. Connected sources corroborate a Denial of Service path v...

CVE-2008-5754

Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file aka Session-File with a long second line, possibly a related issue to CVE-2008-5753...

CVE-2008-5756: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping .cmap file...

CVE-2008-5722

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...