CVE-2013-6809: Use of Externally-Controlled Format String

Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service crash or possibly execute arbitrary code via format string specifiers in the Remote File field...

Fedora 19 : xdialog-2.3.1-13.fc19 (2013-22697)

Fixes a format string issue. argv0 was injected unchecked into a format string. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

kernel: block: passing disk names as format strings

Format string vulnerability in the registerdisk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/mdmod/parameters/newarray in order to create a crafted /dev/md device nam...

PT-2014-3410 · University Of California +1 · Boinc +1

Name of the Vulnerable Software and Affected Versions: BOINC version 7.2.33 Description: A format string issue in the PROJECT::write account file function in client/cs account.cpp allows remote attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers ...

Tftpd32 Client Side Format String

"Tftpd32 Client Side Format String Vulnerability" - CVE: CVE-2013-6809 - For reference: + "CWE-134: Uncontrolled Format String" - http://cwe.mitre.org/data/definitions/134.html + "CAPEC-135: Format String Injection" - http://capec.mitre.org/data/definitions/135.html - Affected Vendor: Tftpd32 -...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2013:1645 Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the fifth regul...

poppler security vulnerabilities

Buffer overflow, format string vulnerability...

[ MDVSA-2013:272 ] poppler

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:272 http://www.mandriva.com/en/support/security/ Package : poppler Date : November 21, 2013 Affected: Business Server 1.0 Problem Description: Updated poppler packages fix security vulnerabilities: Poppler i...

CVE-2013-4474

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

CVE-2013-4474

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

DEBIAN-CVE-2013-4474

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

Format string

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

CVE-2013-4474

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

CVE-2013-4474

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

CVE-2013-4474

CVE-2013-4474 affects Poppler (before 0.24.3). A format string vulnerability in the extractPages function (utils/pdfseparate.cc) allows remote attackers to crash the process via specially crafted destination filenames, causing a denial of service. Affected: Poppler’s pdfseparate tool; root cause:...

CVE-2013-4474

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

CVE-2013-4474

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

CVE-2013-4474: Improper Input Validation

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

Mandriva Linux Security Advisory : poppler (MDVSA-2013:272)

Updated poppler packages fix security vulnerabilities : Poppler is found to be affected by a stack based buffer overflow vulnerability in the pdfseparate utility. Successfully exploiting this issue could allow remote attackers to execute arbitrary code in the context of the affected application...