RHEL 3 / 4 : vim (RHSA-2008:0617)

Updated vim packages that fix various security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Vim Visual editor IMproved is an updated and improved version of the vi editor. Severa...

ICQ < 6 Build 6059 Message Processing Format String

The version of ICQ installed on the remote host is earlier than 6 Build 6059. Such versions reportedly are affected by a format string vulnerability in the embedded Internet Explorer component triggered when processing HTML messages with a format string specifier such as '%020000000p'. If a remot...

Adobe Acrobat util.printf JavaScript function buffer overflow

Added: 11/10/2008 CVE: CVE-2008-2992 BID: 30035 OSVDB: 49520 Background Adobe Acrobat is software for creating PDF documents. Problem A buffer overflow vulnerability allows command execution when a user opens a PDF file which calls the util.printf JavaScript function with a specially crafted form...

Adobe Acrobat util.printf JavaScript function buffer overflow

Added: 11/10/2008 CVE: CVE-2008-2992 BID: 30035 OSVDB: 49520 Background Adobe Acrobat is software for creating PDF documents. Problem A buffer overflow vulnerability allows command execution when a user opens a PDF file which calls the util.printf JavaScript function with a specially crafted form...

Adobe Acrobat util.printf JavaScript function buffer overflow

Added: 11/10/2008 CVE: CVE-2008-2992 BID: 30035 OSVDB: 49520 Background Adobe Acrobat is software for creating PDF documents. Problem A buffer overflow vulnerability allows command execution when a user opens a PDF file which calls the util.printf JavaScript function with a specially crafted form...

CVE-2008-2992

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104...

CVE-2008-2992

Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104. Recent assessments: Assessed Attacker...

RHEL 5 : kernel (RHSA-2008:0957)

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 12th November 2008 The original packages distributed wi...

Perl File::Find::Object模块格式串漏洞

BUGTRAQ ID: 31938 CNCAN ID：CNCAN-2008102803 Perl File::Find::Object是一款面向对象的File::Find替代程序。 Perl File::Find::Object处理部分循环条件时存在格式串问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 由于文件名不正确过滤传递给printf STDERR，可导致触发典型的格式串错误，如果应用程序利用这个库扫描目录树，可以应用程序权限执行任意指令。 Olivier Thauvin File::Find::Object 0.1 可升级到File::Find::Object...

CVE-2008-4748

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

Format string

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

CVE-2008-4748

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

CVE-2008-4748

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in the irc:// URI...

CVE-2008-4748

KVirc 3.4.0 is affected by a format-string vulnerability in the URI handler when KVirc is set as the default application for processing irc:// URIs. The flaw allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via format specifiers in t...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

No description provided by source. !-- KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Summary: KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted...

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remote Format String Exploit PoC\n\n\t\tby LiquidWorm c 2008"; function poc window.location.href = "irc://A:%n -i"; var answ = confirm"Press OK to start exploitation\nPress Cancel to skip exploitation"; if an...

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

KVIrc 3.4.0 - Virgo Remote Format String PoC KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remote Format String Exploit PoC\n\n\t\tby LiquidWorm c 2008"; function poc window.location.href = "irc://A:%n -i"; var answ = confirm"Press OK to start...

kvirc-format.txt

KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remote Format String Exploit PoC\n\n\t\tby LiquidWorm c 2008"; function poc window.location.href = "irc://A:%n -i"; var answ = confirm"Press OK to start exploitation\nPress Cancel to skip exploitation"; if an...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

Exploit for unknown platform in category dos / poc ================================================== KVIrc 3.4.0 Virgo Remote Format String Exploit PoC ================================================== KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remo...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

Summary KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted developers around the world. Description KVIrc is prone to a remote format-string vulnerability...