1658 matches found
Crlf injection
CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...
Crlf injection
Multiple CRLF injection vulnerabilities in 1 xmms-thing 1.0, 2 XMMS Remote Control Script 1.07, 3 Disrok 1.0, 4 a2x 0.0.1, 5 Another xmms-info script 1.0, 6 XChat-XMMS 0.8.1, and other unspecified scripts for XChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF...
Crlf injection
Multiple CRLF injection vulnerabilities in 1 ixmmsa.pl 0.3, 2 l33tmusic.pl 2.00, 3 mpg123.pl 0.01, 4 ogg123.pl 0.01, 5 xmms.pl 2.0, 6 xmms2.pl 1.1.3, and 7 xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.11 allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences...
CVE-2007-4400
CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...
CVE-2007-4399
The CVE-2007-4399 entry describes a CRLF injection vulnerability in the xmms.bx 1.0 script used with BitchX, enabling user-assisted remote attackers to run arbitrary IRC commands via CRLF sequences embedded in the name field of an MP3 file. Affected component: xmms.bx 1.0 script for BitchX; root ...
CVE-2007-4403
The CVE-2007-4403 affects the mIRC Control Plug-in for Winamp. The vulnerability occurs when the name of a song in an MP3 file includes the pipe character (|) shell metacharacter, which can be passed to the shell to trigger user‑assisted remote code execution. The provided documents describe the ...
Design/Logic Flaw
Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...
CVE-2007-3032
Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...
CVE-2007-3032
Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...
CVE-2007-3032
CVE-2007-3032 is a Windows Vista vulnerability in the Contacts Gadget that could allow remote code execution when a user imports specially crafted contact data. The issue, described across multiple sources, arises from insufficient validation of imported contact information, enabling code executi...
CVE-2007-4251
OpenOffice.org OOo 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service...
Denial of service
OpenOffice.org OOo 2.2 does not properly handle files with multiple extensions, which allows user-assisted remote attackers to cause a denial of service...
CVE-2007-4227
Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service via a certain JPG file, as demonstrated by something.jpg. NOTE: this issue might be related to CVE-2007-3958...
CVE-2007-4227
Microsoft Windows Explorer (explorer.exe) is affected by CVE-2007-4227, a user-assisted DoS vulnerability triggered by processing a crafted image file (e.g., something.jpg). The connected documents also reference CVE-2007-3958 (GIF file) as related, indicating a similar DoS vector in explorer.exe...
CVE-2007-4227
Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service via a certain JPG file, as demonstrated by something.jpg. NOTE: this issue might be related to CVE-2007-3958...
CVE-2007-4199
Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain NTFS files via a malformed NTFS image that triggers 1 dereference of a certain integer value by ntfsdent.c in fls, or 2 dereference ...
CVE-2007-4199
Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain NTFS files via a malformed NTFS image that triggers 1 dereference of a certain integer value by ntfsdent.c in fls, or 2 dereference ...
Null pointer dereference
icat in Brian Carrier The Sleuth Kit TSK before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service NULL dereference and application crash and prevent examination of certain NTFS files via a malformed NTFS image...
CVE-2007-4194
CVE-2007-4194 concerns Guidance Software EnCase 5.0 and describes user‑assisted remote denial of service via a malformed file, related to EnCase’s file system parsing. The core weakness centers on how EnCase parses certain inputs, potentially causing stack memory consumption and unspecified impac...