CVE-2009-0181

Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters...

CVE-2009-0181

VUPlayer is affected by CVE-2009-0181 due to a buffer overflow in handling input file content, demonstrated by a file composed entirely of 'A' characters. The OpenVAS entry also flags a buffer overflow in the VUPlayer .asx playlist handling. Reported impact in the NVD refers to an unknown impact ...

Fedora 9 : xterm-238-1.fc9 (2009-0059)

This update fixes the following security issue: CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related...

Adobe Reader: User-assisted execution of arbitrary code

Background Adobe Reader formerly Adobe Acrobat Reader is a closed-source PDF reader. Description An unspecified vulnerability can be triggered by a malformed PDF document, as demonstrated by 2008-HI2.pdf CVE-2008-2549. Peter Vreugdenhil, Dyon Balding, Will Dormann, Damian Frizza, and Greg MacManu...

GLSA-200901-06 : Tremulous: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200901-06 Tremulous: User-assisted execution of arbitrary code It has been reported that Tremulous includes a vulnerable version of the ioQuake3 engine GLSA 200605-12, CVE-2006-2236. Impact : A remote attacker could entice a user ...

CVE-2008-5868

CVE-2008-5868 describes a stack-based buffer overflow in IntelliTamper versions 2.07 and 2.08. The overflow can be triggered by a long ProxyLogin value in a configuration (.cfg) file, potentially allowing user-assisted attackers to execute arbitrary code. The description enumerates the vulnerable...

Crlf injection

CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...

CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences...

CVE-2006-7236

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences...

CVE-2008-2383

The CVE-2008-2383 entry documents a CRLF injection vulnerability in xterm. Attackers may exploitLF characters surrounding a command name within a DECRQSS (Device Control Request Status String) escape sequence in a text file to coerce arbitrary command execution. The issue is related to earlier CV...

CVE-2008-5754

Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file aka Session-File with a long second line, possibly a related issue to CVE-2008-5753...

CVE-2008-5756

The CVE-2008-5756 issue affects BreakPoint Software Hex Workshop 5.1.4. A buffer overflow occurs when parsing a Color Mapping (.cmap) file due to a long mapping reference, enabling user-assisted DoS and potentially arbitrary code execution. Connected sources corroborate a Denial of Service path v...

CVE-2008-5754

Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file aka Session-File with a long second line, possibly a related issue to CVE-2008-5753...

CVE-2008-5722

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...

Buffer overflow

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...

CVE-2008-5722

Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long SAWSTUDIO PREFERENCES STRUCT value in a .prf preferences file...

Imlib2: User-assisted execution of arbitrary code

Background Imlib2 is replacement library from the Enlightenment project for libraries like libXpm. Description Julien Danjou reported a pointer arithmetic error and a heap-based buffer overflow within the load function of the XPM image loader. Impact A remote attacker could entice a user to proce...

CVE-2008-5680

Multiple buffer overflows in Opera before 9.63 might allow 1 remote attackers to execute arbitrary code via a crafted text area, or allow 2 user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178...

CVE-2008-4234

Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application association for the file, which does not trigger a...

CVE-2008-4234

CVE-2008-4234 affects Mac OS X 10.5.x (CoreTypes). An incomplete blacklist in the Quarantine/Download Validation allowed a file with executable content type and no application association to bypass warnings, potentially enabling arbitrary code execution. Affected: Mac OS X 10.5 to 10.5.5; Server ...