CVE-2007-5561

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...

openSUSE 10 Security Update : mailman (mailman-2170)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

Heap overflow

Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control kavwebscan.dll in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer...

Kaspersky Online Scanner kavwebscan.CKAVWebScan ActiveX (kavwebscan.dll) Format String Arbitrary Code Execution

The remote host contains the Kaspersky Online Scanner, an online virus scanner for Windows. The version of the Kaspersky Web Scanner ActiveX control installed as part of this software on the remote host contains a format string vulnerability. By tricking a user on the affected host into visiting ...

CVE-2004-2714

Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability...

CVE-2007-5184

Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name...

CVE-2007-5184

CVE-2007-5184 corresponds to a format-string vulnerability in the SMBDirList function of dirlist.c in SmbFTPD 0.96. The issue allows remote attackers to execute arbitrary code via format specifiers contained in a directory name. Public references (NVD, CVE listings, and FreeBSD VuXML/OpenVAS entr...

id Software Doom 3 Engine - Console String Visualization Format String

id Software Doom 3 Engine - Console String Visualization Format String // source: https://www.securityfocus.com/bid/25893/info id Software Doom 3 engine is prone to a format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of a user...

smbfptd FTP server format string vulnerability

Format string vulnerability on directory listing creation...

smbftpd 0.96 format string vulnerability

smbftpd 0.96 format string vulnerability -------------------------------------------------------------------------- Versions: 0.96 maybe earlier versions as well Date: 01 Oct 2007 Author: Jerry Illikainen email: [email protected] www: debork.se Introduction ------------ "SmbFTPD is a FTP daemon for...

id Software Doom 3 Engine - Console String Visualization Format String

// source: https://www.securityfocus.com/bid/25893/info id Software Doom 3 engine is prone to a format-string vulnerability. Exploiting this issue will allow attackers to execute arbitrary code with the permissions of a user running the application. Failed attacks will likely cause...

smbftpd -- format string vulnerability

Secunia reports: Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name...

CVE-2007-5112

CVE-2007-5112 is an XSS vulnerability in Google Urchin 5 (versions up to 5.7.03 and earlier) affecting the session.cgi (login page). The weakness allows remote attackers to inject arbitrary script/HTML via the query string, as described in the NVD entry. The impact noted includes potential creden...

php money_format format string issue

The moneyformat function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple 1 %i and 2 %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability...

php money_format format string issue

The moneyformat function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple 1 %i and 2 %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability...

Format string

Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...

CVE-2007-4832

Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...

CVE-2007-4832

CVE-2007-4832 affects CellFactor Revolution (≤1.03). It is a format-string vulnerability in a nickname field that enables remote code execution. Reported CVSSv2 base score 7.5 (HIGH) with network access and minimal user interaction. Public references detail the vulnerability, but no remediation v...

DEBIAN-CVE-2007-4754

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...

Format string

Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...