UBUNTU-CVE-2018-1000052

fmtlib version prior to version 4.1.0 before commit 0555cea5fc0bf890afe0071a558e44625a34ba85 contains a Memory corruption SIGSEGV, CWE-134 vulnerability in fmt::print library function that can result in Denial of Service. This attack appear to be exploitable via Specifying an invalid format...

CVE-2018-1000052

fmtlib version prior to version 4.1.0 before commit 0555cea5fc0bf890afe0071a558e44625a34ba85 contains a Memory corruption SIGSEGV, CWE-134 vulnerability in fmt::print library function that can result in Denial of Service. This attack appear to be exploitable via Specifying an invalid format...

CVE-2018-1000052: Use of Externally-Controlled Format String

fmtlib version prior to version 4.1.0 before commit 0555cea5fc0bf890afe0071a558e44625a34ba85 contains a Memory corruption SIGSEGV, CWE-134 vulnerability in fmt::print library function that can result in Denial of Service. This attack appear to be exploitable via Specifying an invalid format...

PT-2018-9239

Name of the Vulnerable Software and Affected Versions: fmtlib versions prior to 4.1.0 Description: The issue is related to a memory corruption problem that can cause a Denial of Service. It occurs when an invalid format specifier is used in the fmt::print function, resulting in a SIGSEGV due to...

fmt-pictures.at XSS vulnerability

Open Bug Bounty ID: OBB-299468 Description| Value ---|--- Affected Website:| fmt-pictures.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ncurses denial of service vulnerability (CNVD-2017-25659)

ncurses new curses is a library of programs that provides APIs that allow programmers to write text-based user interfaces that are independent of the terminal. A denial of service vulnerability exists in the fmtentry function in ncurses' progs/dumpentry.c, which can be exploited by a remote...

DEBIAN-CVE-2017-13733

There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13733

There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

PT-2017-13055

Name of the Vulnerable Software and Affected Versions ncurses version 6.0 Description The issue is related to an illegal address access in the fmt entry function, which could potentially lead to a remote denial of service attack. Recommendations For ncurses version 6.0, update to a newer version...

ALPINE-CVE-2017-10684

In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

PT-2017-11436

Name of the Vulnerable Software and Affected Versions ncurses version 6.0 Description The issue is related to a stack-based buffer overflow in the fmt entry function. This can be exploited with a crafted input, potentially leading to a remote arbitrary code execution attack. Recommendations For...

PT-2017-11437

Name of the Vulnerable Software and Affected Versions ncurses version 6.0 Description The issue is related to a format string vulnerability in the fmt entry function. This vulnerability can be exploited with a crafted input, potentially leading to a remote arbitrary code execution attack...

PT-2017-14648

Name of the Vulnerable Software and Affected Versions libsndfile version 1.0.25 Description A divide-by-zero error exists in the function wav w64 read fmt chunk in wav w64.c, which may lead to denial of service when playing a crafted audio file. Recommendations For libsndfile version 1.0.25, upda...

PT-2016-3987

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.x through 2.0.0 Description The issue is related to the ipmi fmt udpport function in the IPMI dissector, which improperly attempts to access a packet scope. This allows remote attackers to cause a denial of service,...

RealNetworks Realplayer QCP Parsing Heap Overflow

Exploit for windows platform in category remote exploits $Id: realplayerqcp.rb 13745 2011-09-17 06:48:33Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

RealNetworks Realplayer QCP Parsing Heap Overflow

This module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop. This allows a remote attacker to execute...

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-229 June 29, 2011 -- CVE ID: CVE-2011-0209 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-229 June 29, 2011 -- CVE ID: CVE-2011-0209 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...

SecurityReason: Multiple BSD printf(1) and multiple dtoa/*printf(3) vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple BSD printf1 and multiple dtoa/printf3 vulnerabilities Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 29.06.2009 - - Pub.: 30.10.2009 We are going inform all vendors, about this problem Affected Software official: - - OpenB...

CVE-2009-1218

Multiple cross-site scripting XSS vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via 1 the fmt-out parameter to login.wcap or 2 the date...