391 matches found
Firefox / Opera code execution
Command lines arguments can be pasted through URL if Firefox or Opera are invoked from external application in Unix-like systems...
CVE-2004-2515
Technical details for CVE-2004-2515 are not publicly available in the provided documents. The description notes a format-string vulnerability in VMware Workstation 4.5.2 but no specifics on affected components, root cause, or fixes are included here. Monitor for updates.
VisualBoyAdvanced Nintendo emulator buffer overflow
Buffer overflow on command line arguments parsing...
CVE-2005-2655
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments...
CVE-2005-2505
Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation...
CVE-2005-2505
Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation...
CVE-2005-2236
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments...
CVE-2005-2236
CVE-2005-2236 describes a format string vulnerability in the paginit command for IBM AIX 5.3 (and possibly other versions). The issue could allow local users to execute arbitrary code via format strings supplied in command line arguments. This is a local privilege concern with an impact described...
[SA15544] Fast n Furious DtDNS Updater Command Line Argument Disclosure
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Fast n Furious DtDNS Updater information leak
Command line arguments are visible in process list...
CVE-2005-1393
Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to 1 asmaster, 2 asuser, 3 asutility, 4 se, or 5 asrecovery...
CVE-2000-1220
The line printer daemon lpd in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file...
CVE-2002-1633
Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to 1 sample, 2 ex, 3 du, 4 find, 5 lex, 6 mkdir, 7 rm, 8 serserv, 9 tcpserv, 10 termdef, 11 time, 12 unzip, 13 use, 14 wcc, 15 wcc386, 16 wd, 17 wdisasm, 18 which, 19 wlib, 20...
CVE-2002-1598
Buffer overflows in Computer Associates MLink CA-MLink 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to 1 mlclear or 2 mllock...
unace -- multiple vulnerabilities
Ulf Härnhammar reports: There are buffer overflows when extracting, testing or listing specially prepared ACE archives. There are directory traversal bugs when extracting ACE archives. There are also buffer overflows when dealing with long 17000 characters command line arguments. Secunia reports:...
CVE-2004-1131
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments...
CVE-2004-1114
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777...
CVE-2004-1114
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777...
[SA13191] Skype "callto:" URI Handler Buffer Overflow Vulnerability
TITLE: Skype "callto:" URI Handler Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13191 VERIFY ADVISORY: http://secunia.com/advisories/13191/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Skype for Windows 1.x http://secunia.com/product/4250/ DESCRIPTION: A...