Newsbeuter: User-assisted execution of arbitrary code

Background Newsbeuter is a RSS/Atom feed reader for the text console. Description J.H.M. Dassen reported that the open-in-browser command does not properly escape shell metacharacters in the URL before passing it to system. Impact A remote attacker could entice a user to open a feed with speciall...

CVE-2008-4101

Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to 1 execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" semicolon followed by a command, or execute arbitrary Ex commands by entering an argument afte...

Code injection

Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to 1 execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" semicolon followed by a command, or execute arbitrary Ex commands by entering an argument afte...

CVE-2008-4101

Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to 1 execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" semicolon followed by a command, or execute arbitrary Ex commands by entering an argument afte...

CVE-2008-4101

Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to 1 execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" semicolon followed by a command, or execute arbitrary Ex commands by entering an argument afte...

CVE-2008-3961

Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file...

CVE-2008-3961

The CVE-2008-3961 entry corresponds to Adobe Illustrator CS2 on Macintosh and describes multiple unspecified vulnerabilities that allow user-assisted attackers to execute arbitrary code via a crafted AI file. The vulnerability is rated high (CVSS v2 base score 9.3) with complete impact on confide...

CVE-2008-4087

Affected product: Acoustica Beatcraft 1.02 Build 19. The CVE describes a stack-based buffer overflow in a Beatcraft Project file (bcproj) where a long string in an instrument title field can be processed by Beatcraft, enabling user-assisted attackers to trigger a denial of service or arbitrary co...

CVE-2008-3956

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...

CVE-2008-3956

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...

GLSA-200809-07 : libTIFF: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200809-07 libTIFF: User-assisted execution of arbitrary code Drew Yao Apple Product Security and Clay Wood reported multiple buffer underflows in the LZWDecode and LZWDecodeCompat functions in tiflzw.c when processing TIFF files...

GLSA-200809-01 : yelp: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200809-01 yelp: User-assisted execution of arbitrary code Aaron Grattafiori reported a format string vulnerability in the windowerror function in yelp-window.c. Impact : A remote attacker can entice a user to open specially crafte...

yelp: User-assisted execution of arbitrary code

Background yelp is the default help browser for GNOME. Description Aaron Grattafiori reported a format string vulnerability in the windowerror function in yelp-window.c. Impact A remote attacker can entice a user to open specially crafted "man:" or "ghelp:" URIs in yelp, or an application using...

CVE-2008-3877

Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execute arbitrary code via a crafted .mx4 file. NOTE: it was later reported that version 3 is also affected...

CVE-2008-3877

The provided records confirm a stack-based buffer overflow in Acoustica Mixcraft versions 4.1 Build 96 and 4.2 Build 98 (and note that version 3 is affected) that allows user-assisted attackers to execute arbitrary code via a crafted .mx4 file. This is the underlying vulnerability; details such a...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

GLSA-200808-10 : Adobe Reader: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200808-10 Adobe Reader: User-assisted execution of arbitrary code The Johns Hopkins University Applied Physics Laboratory reported that input to an unspecified JavaScript method is not properly validated. Impact : A remote attacke...

Adobe Reader: User-assisted execution of arbitrary code

Background Adobe Reader formerly Adobe Acrobat Reader is a closed-source PDF reader. Description The Johns Hopkins University Applied Physics Laboratory reported that input to an unspecified JavaScript method is not properly validated. Impact A remote attacker could entice a user to open a...

GLSA-200808-01 : xine-lib: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200808-01 xine-lib: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in xine-lib: Alin Rad Pop of Secunia reported an array indexing vulnerability in the sdpplinparse function in the file...

Cross site scripting

Cross-site scripting XSS vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify...