36 matches found
PT-2018-15281 · Enlightenment +1 · Terminology +1
Name of the Vulnerable Software and Affected Versions: Terminology versions prior to 1.3.1 Description: The issue allows Remote Code Execution due to the mishandling of popmedia. This can be demonstrated by an unsafe command, such as "cat README.md", when a specific sequence is used. A popmedia...
CVE-2018-1000193
A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and canno...
The vulnerability of the Flash Player software allows a malicious attacker to execute arbitrary code or cause a service failure.
The Flash Player software contains a vulnerability in the “PCRE” component, which stems from insufficient data validation when processing the “\c” control sequence followed by a character in UTF-8 encoding. This vulnerability can be exploited by malicious actors using a specially crafted swf file...
Debian DLA-347-1 : putty security update
It was discovered that PuTTY's terminal emulator did not properly validate the parameter to the ECH erase characters control sequence, allowing a denial of service and possibly remote code execution. For the oldoldstable distribution squeeze, this problem has been fixed in version...
DLA-347-1 putty - security update
Bulletin has no description...
MGASA-2015-0442 Updated putty packages fix security vulnerability
Versions of PuTTY 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH erase characters control sequence in the terminal emulator CVE-2015-5309...
Updated putty packages fix security vulnerability
Versions of PuTTY 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH erase characters control sequence in the terminal emulator CVE-2015-5309...
FreeBSD : PuTTY -- memory corruption in terminal emulator's erase character handling (0cb0afd9-86b8-11e5-bf60-080027ef73ec)
Ben Harris reports : Versions of PuTTY and pterm between 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH erase characters control sequence in the terminal emulator. To exploit a vulnerability in the terminal emulator, an attacker must be ab...
PuTTY -- memory corruption in terminal emulator's erase character handling
Ben Harris reports: Versions of PuTTY and pterm between 0.54 and 0.65 inclusive have a potentially memory-corrupting integer overflow in the handling of the ECH erase characters control sequence in the terminal emulator. To exploit a vulnerability in the terminal emulator, an attacker must be abl...
CVE-2013-0312
389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...
CVE-2013-0312
389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...
DEBIAN-CVE-2013-0312
389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...
CVE-2013-0312
389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...
CVE-2013-0312
389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...
CVE-2013-0312: Undefined Security Weakness
389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service crash via a zero length LDAP control sequence...
DEBIAN-CVE-2008-2383
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...