8582 matches found
CVE-2004-1153
Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an .ETD document containing format string specifiers in 1 title or 2 baseurl fields...
CVE-2004-1097
Format string vulnerability in the cherokeeloggerncsawritestring function in Cherokee 0.4.17 and earlier, when authenticating via authpam, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via format string specifiers in the URL...
CVE-2004-1214
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in 1 a nickname or 2 message text...
CVE-2004-1192
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server...
[Full-Disclosure] [gentoo-announce] [ GLSA 200501-11 ] Dillo: Format string vulnerability
Gentoo Linux Security Advisory GLSA 200501-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Dillo browser format string bug
Format string bug in aInterfacemsg function...
Dillo: Format string vulnerability
Background Dillo is a small and fast multi-platform web browser based on GTK+. Description Gentoo Linux developer Tavis Ormandy found a format string bug in Dillo's handling of messages in aInterfacemsg. Impact An attacker could craft a malicious web page which, when accessed using Dillo, would...
Socket termination, format string and XSS in Soldner Secret Wars 30830
Luigi Auriemma Application: SLDNER - Secret Wars http://www.secretwars.net Versions: = 30830 Platforms: Windows Bugs: A silent socket termination B in-game format string C in-game cross site scripting versus admin Exploitation: remote, versus server B and C are in-game bugs Date: 04 Jan 2005...
3Com 3CDaemon multipe bugs
Format string bugs, buffer overflows, DoS...
CVE-2005-0280
Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in a message...
top formatstring bug
Format string bug allows kmem group privilege escalation...
[UNIX] William LeFebvre "top" Format String Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
dillo -- format string vulnerability
dillo contains a format string vulnerability which could lead to execution of arbitrary code simply by viewing a web page or opening a HTML file...
CVE-2004-1388
Format string vulnerability in the gpsdreport function for BerliOS GPD daemon gpsd, formerly pygps 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls...
CVE-2004-2714
Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability...
CVE-2004-2677
Format string vulnerability in qwik-smtpd.c in QwikMail SMTP qwik-smtpd 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the 1 clientRcptTo array, and the 2 Received and 3 messageID variables, possibly involving HELO and hostname arguments...
CVE-2004-2417
Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the 1 client hostname or 2 message-id, which are injected into a syslog message...
CVE-2004-2386
Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function...
CVE-2004-1805
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in class names...