8591 matches found
MOAB-26-01-2007: Apple Installer Package Filename Format String Vulnerability
Summary Apple Installer is the application in charge of handling the installation of packages for Mac OS X, in form of pkg, distz and mpkg files. Installer fails to properly handle package filename strings. It's a affected by a typical format string vulnerability, which can lead to a denial of...
MOAB-24-01-2007: Apple Software Update Catalog Filename Format String Vulnerability
Summary Apple Software Update is used for delivering patches to end-users, such as the Apple Security Update 2007-001. It relies on the HTTP protocol for retrieving files associated with each available patch, and handles the application/x-apple.sucatalog+xml MIME type and the sucatalog and swutmp...
WS_FTP 2007 Professional SCP handling format string vulnerability
Synopsis: WSFTP 2007 Professional SCP handling format string vulnerability Product: WSFTP 2007 Professional Vendor: Ipswitch I. Background "..Transfer files anywhere, anytime, with complete security. Lightning fast transfer speeds Industry leading security Time saving features include schedule,...
[SECURITY] [DSA 1252-1] New vlc packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1252-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2007 http://www.debian.org/security/faq -...
Apple Installer Package 2.1.5 - Filename Format String
Apple Installer Package 2.1.5 - Filename Format String source: https://www.securityfocus.com/bid/22272/info Apple Installer is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a...
DSA-1252-1 vlc
Bulletin has no description...
Apple Installer Package 2.1.5 - Filename Format String
source: https://www.securityfocus.com/bid/22272/info Apple Installer is prone to a format-string vulnerability because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. A successful attack may crash the...
GLSA-200701-18 : xine-ui: Format string vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200701-18 xine-ui: Format string vulnerabilities Due to the improper handling and use of format strings, the errorscreatewindow function in errors.c does not safely write data to memory. Impact : An attacker could entice a user to...
Apple Mac OSX 10.4.x - Software Update Format String
source: https://www.securityfocus.com/bid/22222/info Apple Software Update is prone to a format-string vulnerability. This issue presents itself because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. A...
Apple Mac OSX 10.4.x - Software Update Format String
Apple Mac OSX 10.4.x - Software Update Format String source: https://www.securityfocus.com/bid/22222/info Apple Software Update is prone to a format-string vulnerability. This issue presents itself because the application fails to properly sanitize user-supplied input before passing it as the...
xine-ui format string vulnerability
Format string vulnerability in errorscreatewindow on media files parsing...
Xine-ui format string Vulnerabilties.
there iz a fmt string vuln in xine-ui specifically in errors.c func errorscreatewindow that can be used to maliciously execuute arbitary code...
Format string
Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service null pointer dereference and application crash and possibly execute arbitrary code via format string specifiers in an aim:// URI...
CVE-2007-0021
Apple iChat 3.1.6 is affected by a format string vulnerability in the AIM URI handler. A remote attacker could exploit crafted aim:// URIs to cause a denial of service (null pointer dereference) and possibly execute arbitrary code. The issue is remediated by Apple Security Update 2007-002 (Mac OS...
CVE-2007-0021
Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service null pointer dereference and application crash and possibly execute arbitrary code via format string specifiers in an aim:// URI...
xine-ui: Format string vulnerabilities
Background xine-ui is a skin-based user interface for xine. xine is a free multimedia player. It plays CDs, DVDs, and VCDs, and can also decode other common multimedia formats. Description Due to the improper handling and use of format strings, the errorscreatewindow function in errors.c does not...
Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC
No description provided by source. !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd" html head titleMOAB-20-01-2007/title script function boom var str = ''; for var i = 0; i 20; i++ str = str + escape'A%n'; str = 'aim:gochat?roomname=' + str;...
BitDefender Client Log Creation Functionality Format String
The version of BitDefender installed on the remote host fails to sanitize scan job settings of format strings. By leveraging this flaw, a local attacker may be able to crash the antivirus application or possibly even gain complete control of the affected system. C Tenable Network Security, Inc...
MOAB-16-01-2007: Multiple Colloquy IRC Format String Vulnerabilities
Summary Traditionally, chat clients on the Mac have been anything but glamorous. Colloquy is an advanced IRC & SILC client which aims to fill this void. By adhering to Mac OS X interface conventions, Colloquy has the look and feel of a quality Mac application. By making a common mistake the...
MOAB-02-01-2007: VLC Media Player udp:// Format String Vulnerability
Summary The following description of the software is provided by vendor VideoLAN: VideoLAN is a software project, which produces free software for video, released under the GNU General Public License. The main product is the cross-platform VLC media player. The VLC media player is a highly portab...