9913 matches found
CVE-2007-0254
Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...
CVE-2007-0255
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...
DEBIAN-CVE-2007-0254
Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...
CVE-2007-0254
CVE-2007-0254 refers to a format-string vulnerability in the xine-ui project, specifically in the errors_create_window() function of errors.c. The flaw potentially allows arbitrary code execution via crafted input, as reported in multiple advisories for xine-ui. Affected versions include 0.99.4-e...
CVE-2007-0254: Undefined Security Weakness
Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...
CVE-2007-0255: Undefined Security Weakness
XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain M3U file that contains a long EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017...
BolinTech DreamFTP (USER) Remote Buffer Overflow PoC
No description provided by source. / BolinTech DreamFTP USER buffer overflow The server does not correctly handle format string so sending a command like USER %13000 let us own EDX. Other values can also affect EAX & ECX &...
BolinTech DreamFTP Server - USER Remote Buffer Overflow (PoC)
BolinTech DreamFTP Server - USER Remote Buffer Overflow PoC / BolinTech DreamFTP USER buffer overflow The server does not correctly handle format string so sending a command like USER %13000 let us own EDX. Other values can also affect EAX & ECX This is only a POC but code execution is possible...
BolinTech DreamFTP (USER) Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ==================================================== BolinTech DreamFTP USER Remote Buffer Overflow PoC ==================================================== / BolinTech DreamFTP USER buffer overflow The server does not correctly handle format...
berlios.meta.txt
package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' = 1, 'UserOpts' =...
Berlios GPSD <= 2.7 Remote Format String Exploit (meta)
No description provided by source. package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb senotier at enseirb.fr', ,...
Format string
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
CVE-2007-0148
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
CVE-2007-0148
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
CVE-2007-0148
CVE-2007-0148 affects OmniGroup OmniWeb 5.5.1. Root cause: a format string vulnerability in the Javascript alert function that can be exploited by remote attackers to cause a crash or to execute arbitrary code. Impact includes denial of service and potential code execution with network-based acce...
CVE-2007-0148: Undefined Security Weakness
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the Javascript alert function...
Apple iLife iPhoto PhotoCast XML远程格式串漏洞
Apple iLife iPhoto PhotoCast是一款用于在网站上共享照片的工具。 Apple iLife iPhoto PhotoCast处理XML种子存在问题，远程攻击者可以利用漏洞进行格式串攻击，可能以应用程序进程权限执行任意指令。 通过构建特殊的iPhoto photocast XML feed，恶意用户可以导致iPhoto PhotoCast在处理"title"元素时出现格式串错误，造成远程任意代码执行。 Apple iLife iPhoto 6.0.5 316 目前没有详细解决方案提供： http://www.apple.com/ilife/iphoto/...
OmniWeb Browser < 5.5.2 Javascript alert Function Format String
Binary data 3879.prm...
Berlios GPSD 2.7 - Remote Format String (Metasploit)
Berlios GPSD 2.7 - Remote Format String Metasploit package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' =...
