CVE-2006-1615: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...

Doomsday: Format string vulnerability

Background Doomsday is a modern gaming engine for popular ID games like Doom, Heretic and Hexen. Description Luigi Auriemma discovered that Doomsday incorrectly implements formatted printing. Impact A remote attacker could exploit these vulnerabilities to execute arbitrary code with the rights of...

clamav -- Multiple Vulnerabilities

Secunia reports: Some vulnerabilities have been reported in ClamAV, which potentially can be exploited by malicious people to cause a DoS Denial of Service and compromise a vulnerable system. An unspecified integer overflow error exists in the PE header parser in "libclamav/pe.c". Successful...

Format string

Format string vulnerability in the 1 Conmessage and 2 conPrintf functions in conmain.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments...

CVE-2006-1618

Format string vulnerability in the 1 Conmessage and 2 conPrintf functions in conmain.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments...

CVE-2006-1618

Format string vulnerability in the 1 Conmessage and 2 conPrintf functions in conmain.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments...

CVE-2006-1618

Doomsday engine 1.8.6 is affected by a format-string vulnerability in Con_message and conPrintf (in con_main.c). A remote attacker can cause arbitrary code execution by sending crafted strings (e.g., via the JOIN command or other arguments). The issue stems from incorrect handling of format speci...

CVE-2006-1618: Undefined Security Weakness

Format string vulnerability in the 1 Conmessage and 2 conPrintf functions in conmain.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments...

DSA-1024-1 clamav - heap overflow

Bulletin has no description...

Format string

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

CVE-2006-0559

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

CVE-2006-0559

McAfee WebShield SMTP format-string vulnerability (CVE-2006-0559) affects McAfee WebShield SMTP prior to MR2. The flaw occurs in the bounce message construction where a format string in the original destination address can be processed unsafe, allowing an unauthenticated attacker to execute arbit...

McAfee WebShield antivirus format string vulnerability

Format string vulnerability on SMTP address...

SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability

Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-002 Advisory Name: McAfee WebShield SMTP Format String Vulnerability Release Date : 04-03-2005 Application : McAfee WebShield SMTP 4.5 MR1a Platform : Microsoft Windows Severity : System...

CVE-2006-0559: Undefined Security Weakness

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed...

[Full-disclosure] Format string in Doomsday 1.8.6

Luigi Auriemma Application: Doomsday engine http://www.doomsdayhq.com http://deng.sourceforge.net Versions: = 1.8.6 and current SVN 1.9.0 Platforms: Windows, nix, BSD, Mac and others Bug: format string bug in ConMessage and ConPrintf Exploitation: remote, versus server and clients Date: 03 Apr 20...

Format string

Format string vulnerability in the PrintString function in cconsole.cpp in client/server Doom csDoom 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console...

CVE-2006-1403

Format string vulnerability in the PrintString function in cconsole.cpp in client/server Doom csDoom 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console...

CVE-2006-1403

Format string vulnerability in the PrintString function in cconsole.cpp in client/server Doom csDoom 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console...

CVE-2006-1403

CVE-2006-1403 affects csDoom (client/server Doom) up to version 0.7. The vulnerability is in PrintString (c_console.cpp) and arises from a format-string issue, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands via strings passed to the console. The ...