88 matches found
UBUNTU-CVE-2015-0844
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...
CVE-2015-0844
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...
CVE-2015-0844
Removed by vendor...
Wesnoth -- Remote information disclosure
US-CERT/NIST reports: The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...
ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution
No description provided by source. ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in...
IntelliTamper 2.07 - (.map file) Local Arbitrary Code Execution Exploit
No description provided by source...
CVE-2012-1661
ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...
CVE-2012-1661 - ESRI ArcMap arbitrary code execution via crafted map file.
Description: Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a user before executing embedded VBA. Mxd files are not filtered by email systems so this allows a remote...
ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution
===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a...
ESRI ArcGIS 10.0.X / ArcMap 9 Arbitrary Code Execution
Exploit for windows platform in category local exploits ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. Thi...
Apache 2.0.x < 2.0.47 Multiple Vulnerabilities (DoS, Encryption)
The remote host appears to be running a version of Apache 2.x prior to 2.0.47. It is, therefore, affected by multiple vulnerabilities : - An issue in may occur when the SSLCipherSuite directive is used to upgrade a cipher suite which could lead to a weaker cipher suite being used instead of the...
CVE-2008-5755
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494...
Stack overflow
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494...
CVE-2008-5755
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494...
CVE-2008-5755
CVE-2008-5755 is a stack-based buffer overflow in IntelliTamper 2.07/2.08 that allows remote code execution via a crafted .map file containing a long URL. The vulnerability arises from improper handling when reading MAP files, leading to stack corruption and potential EIP overwrite (examples show...
Intellitamper buffer overflow
Buffer overflow on .map file parsing...
DEBIAN-CVE-2008-5135
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
CVE-2006-2494
Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map file...
Stack overflow
Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map file...
CVE-2006-2494
CVE-2006-2494 is a stack-based buffer overflow in IntelliTamper 2.07 that allows remote code execution via a crafted .map file. Related entries (CVE-2008-5755, CVE-2008-3360) describe similar issues tied to IntelliTamper 2.07/2.08 with MAP files containing long URLs, indicating a potential relate...