Larson Network Print Server 9.4.2 build 105 - LstNPS Logging Function USEP Command Remote Format String

Larson Network Print Server 9.4.2 build 105 - LstNPS Logging Function USEP Command Remote Format String source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker c...

cyan soft - Multiple Applications Format String Denial of Service Vulnerabilities

cyan soft - Multiple Applications Format String Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the...

cyan soft - Multiple Applications Format String / Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function. These applications are also...

Larson Network Print Server 9.4.2 build 105 (LstNPS) - NPSpcSVR.exe License Command Remote Overflow

Larson Network Print Server 9.4.2 build 105 LstNPS - NPSpcSVR.exe License Command Remote Overflow source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker can...

Opium OPI Server and CyanPrintIP - Format String / Denial of Service

source: https://www.securityfocus.com/bid/27734/info Opium OPI Server and CyanPrintIP are prone to a denial-of-service vulnerability and a format-string vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affected application or crash the...

larson-poc.txt

Luigi Auriemma Application: Larson Software Technology Network Print Server http://www.cgmlarson.com/products/NetworkPrintServer.php Versions: = 9.4.2 build 105 Platforms: Windows Bugs: A format string in logging B license buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...

Larson Network Print Server 9.4.2 build 105 - 'LstNPS' Logging Function USEP Command Remote Format String

source: https://www.securityfocus.com/bid/27732/info Larson Software Technology Network Print Server is prone to a format-string vulnerability and a buffer-overflow vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affected application or cras...

CVE-2008-0043

Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions...

Format string

Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions...

CVE-2008-0043

CVE-2008-0043 concerns Apple iPhoto prior to 7.1.2. The issue is a format string vulnerability in photocast subscriptions that could allow a remote attacker to execute arbitrary code on the affected host. The vulnerability affects iPhoto’s handling of photocast subscriptions, with the NVD listing...

CVE-2008-0043

Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions...

iPhoto < 7.1.2 Format String Vulnerability

The remote host is running a version of iPhoto 7.1 older than version 7.1.2. Such versions are reportedly affected by a format string vulnerability. If an attacker can trick a user on the affected host into subscribing to a specially crafted photocast, these issues could be leveraged to execute...

Doomsday: Multiple vulnerabilities

Background The Doomsday Engine deng is a modern gaming engine for popular ID games like Doom, Heretic and Hexen. Description Luigi Auriemma discovered multiple buffer overflows in the DNetPlayerEvent function, the MsgWrite function and the NetSvReadCommands function. He also discovered errors whe...

CVE-2008-0434

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command...

CVE-2008-0434

AXIGEN Mail Server 5.0.2 contains a format string vulnerability in the AXIMilter CNHO command that allows remote attackers to execute arbitrary code (or crash the service) by sending specially crafted input. The issue is in the AXIMilter component and relates to unsanitized format string identifi...

CVE-2008-0434

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command...

CVE-2007-6682

Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter...

DEBIAN-CVE-2007-6682

Format string vulnerability in the httpdFileCallBack function network/httpd.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via format string specifiers in the Connection parameter...

Debian Security Advisory DSA 863-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 863-1. Ulf Härnhammar from the Debian Security Audit Project discovered a format string vulnerability in the CDDB processing component of xine-lib, the xine video/media player library, that could lead to the execution of...

Debian Security Advisory DSA 855-1 (weex)

The remote host is missing an update to weex announced via advisory DSA 855-1. Ulf Härnhammar from the Debian Security Audit Project discovered a format string vulnerability in weex, a non-interactive FTP client for updating web pages, that could be exploited to execute arbitrary code on the...