Lucene search
+L

9917 matches found

osv_dsa
osv_dsa
•added 2006/06/08 12:00 a.m.•27 views

DSA-1093-1 xine - format string

Bulletin has no description...

5CVSS6.4AI score0.07261EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2006/06/08 12:00 a.m.•27 views

GLSA-200606-03 : Dia: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200606-03 Dia: Format string vulnerabilities KaDaL-X discovered a format string error within the handling of filenames. Hans de Goede also discovered several other format string errors in the processing of dia files. Impact : By...

7.5CVSS5.9AI score0.07628EPSS
SaveExploits2References3
Gentoo Linux
Gentoo Linux
•added 2006/06/07 12:00 a.m.•60 views

Dia: Format string vulnerabilities

Background Dia is a GTK+ based diagram creation program. Description KaDaL-X discovered a format string error within the handling of filenames. Hans de Goede also discovered several other format string errors in the processing of dia files. Impact By enticing a user to open a specially crafted...

7.5CVSS7.4AI score0.07628EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2006/06/05 12:00 a.m.•32 views

RHEL 4 : dia (RHSA-2006:0541)

Updated Dia packages that fix several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. Several format string flaws were found in the w...

7.5CVSS6.1AI score0.07628EPSS
SaveExploits2References5
Cent OS
Cent OS
•added 2006/06/01 6:40 p.m.•88 views

dia security update

CentOS Errata and Security Advisory CESA-2006:0541 Updated Dia packages that fix several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of...

7.5CVSS6.3AI score0.07628EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2006/06/01 5:19 p.m.•34 views

security flaw

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

7.5CVSS5.8AI score0.02241EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2006/06/01 5:19 p.m.•35 views

Moderate: Red Hat Security Advisory: dia security update

Updated Dia packages that fix several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. Several format string flaws were found in the w...

7.5CVSS6.3AI score0.07628EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2006/05/31 12:00 a.m.•26 views

Mandrake Linux Security Advisory : dia (MDKSA-2006:093)

A format string vulnerability in Dia allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

7.5CVSS5.5AI score0.07628EPSS
SaveExploits2References2
Prion
Prion
•added 2006/05/28 10:06 a.m.•19 views

Format string

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

7.5CVSS6.9AI score0.07628EPSS
SaveExploits2References16
osv_debian
osv_debian
•added 2006/05/28 10:06 a.m.•12 views

DEBIAN-CVE-2006-2453

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

7.5CVSS7AI score0.02241EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2006/05/28 10:06 a.m.•22 views

CVE-2006-2453

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

6.9AI score0.02241EPSS
SaveExploits0References17
UbuntuCve
UbuntuCve
•added 2006/05/28 10:06 a.m.•31 views

CVE-2006-2453

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

7.5CVSS5.9AI score0.02241EPSS
SaveExploits0References2
NVD
NVD
•added 2006/05/28 10:06 a.m.•18 views

CVE-2006-2453

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

7.5CVSS6.8AI score0.02241EPSS
SaveExploits0References16
Debian CVE
Debian CVE
•added 2006/05/28 10:00 a.m.•29 views

CVE-2006-2453

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

7.5CVSS6.8AI score0.02241EPSS
SaveExploits0
CVE
CVE
•added 2006/05/28 10:00 a.m.•108 views

CVE-2006-2453

CVE-2006-2453 / CVE-2006-2480 (Dia): The vulnerability is in Dia’s format string handling. Multiple connected advisories (OpenSUSE, Red Hat/CentOS, Gentoo GLSA) state that crafted Dia files could allow arbitrary code execution under the user running Dia. Affected: Dia (the diagram drawing app) wi...

7.5CVSS6.8AI score0.02241EPSS
SaveExploits0References16Affected Software1
Cvelist
Cvelist
•added 2006/05/28 10:00 a.m.•34 views

CVE-2006-2453

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

6.8AI score0.02241EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/28 12:00 a.m.•6 views

CVE-2006-2453: Use of Externally-Controlled Format String

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480...

7.5CVSS5.7AI score0.02241EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2006/05/24 4:31 p.m.•62 views

USN-286-1: Dia vulnerabilities

Several format string vulnerabilities have been discovered in dia. By tricking a user into opening a specially crafted dia file, or a file with a specially crafted name, this could be exploited to execute arbitrary code with the user's privileges...

7.5CVSS5.5AI score0.07628EPSS
SaveExploits2
exploitpack
exploitpack
•added 2006/05/23 12:00 a.m.•13 views

Dia 0.8x0.9x - Filename Remote Format String

Dia 0.8x0.9x - Filename Remote Format String source: https://www.securityfocus.com/bid/18078/info Dia is prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/05/23 12:00 a.m.•40 views

Dia 0.8x/0.9x - Filename Remote Format String

source: https://www.securityfocus.com/bid/18078/info Dia is prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that contains format specifiers and th...

5.1CVSS5.8AI score0.07628EPSS
SaveExploits2
Rows per page
Query Builder