php money_format format string issue

The moneyformat function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple 1 %i and 2 %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability...

CVE-2003-1381

Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amxsay command...

CVE-2003-1381

AMX 0.9.2 and earlier, a plugin for Valve Software’s Half-Life Server, is affected by a format string vulnerability in the amx_say command. This allows remote attackers to execute arbitrary commands. Exploitation details, affected versions beyond those stated, and mitigations are not provided in ...

Format string

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

CVE-2007-5561

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

Format string

Format string vulnerability in TIBCO SmartPGM FX allows remote attackers to execute arbitrary code via format string specifiers in unspecified vectors. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known...

CVE-2007-5545

Format string vulnerability in TIBCO SmartPGM FX allows remote attackers to execute arbitrary code via format string specifiers in unspecified vectors. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known...

CVE-2007-5545

Format string vulnerability in TIBCO SmartPGM FX allows remote attackers to execute arbitrary code via format string specifiers in unspecified vectors. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known...

CVE-2007-5561

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

CVE-2007-5561

Format string vulnerability in the Oracle OPMN daemon’s logging function affects Oracle Enterprise Grid Console server 10.2.0.1. A remote attacker can craft a URI in an HTTP request to port 6003 to trigger the flaw and potentially execute arbitrary code. The description notes this may be related ...

CVE-2007-5545

CVE-2007-5545 affects TIBCO SmartPGM FX and is a format string vulnerability that could allow remote code execution via format string specifiers in unspecified vectors. The description notes a vague pre-advisory with no actionable information as of 2007-10-16. Connected records provide no version...

openSUSE 10 Security Update : dia (dia-1435)

Format string bugs in dia could potentially be exploited to execute arbitrary code CVE-2006-2453, CVE-2006-2480. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dia-1435. The text description ...

openSUSE 10 Security Update : log4net (log4net-2211)

This update fixes a format string exploit in the RemoteSyslogAppender of log4net. CVE-2006-0743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update log4net-2211. The text description of this plugi...

openSUSE 10 Security Update : qt3 (qt3-3899)

Format string bugs in QTextEdit can be exploited via specially crafted HTML tags to potentially execute code CVE-2007-3388. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update qt3-3899. The text...

openSUSE 10 Security Update : gvim (gvim-4092)

This update of Vim addresses a format-string bug in 'helptags'. This bug can be exploited to execute code with the privileges of the user running Vim. CVE-2007-2953 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE 10 Security Update : claws-mail (claws-mail-4495)

This update fixes a format string bug in the incputerror function. This bug is triggered when error messages from the POP3 server are displayed and can be exploited remotely to execute arbitrary code. CVE-2007-2958 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE 10 Security Update : gnomemeeting (gnomemeeting-3162)

This update fixes format string problems in gnomemeeting. CVE-2007-1007 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnomemeeting-3162. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : inkscape (inkscape-3062)

Several format string problems where fixed in inkscape. CVE-2007-1463: A format string vulnerability in Inkscape allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs. CVE-2007-1464: Format string...

openSUSE 10 Security Update : gdm (gdm-2387)

A format string bug in the program 'gdmchooser' could potentially be exploited to execute code under a different user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gdm-2387. The text...

openSUSE 10 Security Update : ekiga (ekiga-3023)

This update fixes format string problems in ekiga. CVE-2007-1006 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ekiga-3023. The text description of this plugin is C SUSE LLC...