Heap overflow

An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmtmtmloadsong in fmt/mtm.c, a different vulnerability than CVE-2019-14465...

CVE-2019-14523

CVE-2019-14523 affects Schism Tracker (up to 20190722). The issue is an integer underflow in the Amiga Oktalyzer parser (fmt/okt.c) that underpins the vulnerability. Public advisories detail fixes in OpenSUSE/SU patches (e.g., openSUSE-2019:2019-1, openSUSE-SU-2019:2019-1) and related GLSA/Nessus...

DEBIAN-CVE-2019-14465

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

Heap overflow

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

Denial Of Service (DoS)

libglusterfs.so is vulnerable to a denial of service DoS attack. A malicious user can pass a string using the fmt command with the %s and %d characters to cause the application to crash...

CVE-2018-11133

The 'fmt' parameter of the '/common/runcrossreport.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting...

CVE-2017-13277

In ihevcdfmtconv of ihevcdfmtconv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1,...

fmtlib denial of service vulnerability

fmtlib is an open source formatting library based on C++ . A formatting string vulnerability exists in the 'fmt::print' library function in fmtlib versions prior to 4.1.0. An attacker can exploit this vulnerability to cause a denial of service memory corruption and invalid writes with invalid...

Memory corruption

fmtlib version prior to version 4.1.0 before commit 0555cea5fc0bf890afe0071a558e44625a34ba85 contains a Memory corruption SIGSEGV, CWE-134 vulnerability in fmt::print library function that can result in Denial of Service. This attack appear to be exploitable via Specifying an invalid format...

UBUNTU-CVE-2018-1000052

fmtlib version prior to version 4.1.0 before commit 0555cea5fc0bf890afe0071a558e44625a34ba85 contains a Memory corruption SIGSEGV, CWE-134 vulnerability in fmt::print library function that can result in Denial of Service. This attack appear to be exploitable via Specifying an invalid format...

fmt-pictures.at XSS vulnerability

Open Bug Bounty ID: OBB-299468 Description| Value ---|--- Affected Website:| fmt-pictures.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ncurses denial of service vulnerability (CNVD-2017-25659)

ncurses new curses is a library of programs that provides APIs that allow programmers to write text-based user interfaces that are independent of the terminal. A denial of service vulnerability exists in the fmtentry function in ncurses' progs/dumpentry.c, which can be exploited by a remote...

DEBIAN-CVE-2017-13733

There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13733

There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

ALPINE-CVE-2017-10684

In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary code execution attack...

RealNetworks Realplayer QCP Parsing Heap Overflow

Exploit for windows platform in category remote exploits $Id: realplayerqcp.rb 13745 2011-09-17 06:48:33Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

RealNetworks Realplayer QCP Parsing Heap Overflow

This module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop. This allows a remote attacker to execute...

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-229 June 29, 2011 -- CVE ID: CVE-2011-0209 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability

ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-229 June 29, 2011 -- CVE ID: CVE-2011-0209 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...

SecurityReason: Multiple BSD printf(1) and multiple dtoa/*printf(3) vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple BSD printf1 and multiple dtoa/printf3 vulnerabilities Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 29.06.2009 - - Pub.: 30.10.2009 We are going inform all vendors, about this problem Affected Software official: - - OpenB...