CWE-134 Archives - CVE Vulnerability

CVE-2008-7228

Sun, 26 Feb 2023 09:11:55 +0000

Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101.

The post CVE-2008-7228 appeared first on CVE Vulnerability.

CVE-2008-7159

Sun, 26 Feb 2023 09:11:53 +0000

The silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string.

The post CVE-2008-7159 appeared first on CVE Vulnerability.

CVE-2008-7160

Sun, 26 Feb 2023 09:11:53 +0000

The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string.

The post CVE-2008-7160 appeared first on CVE Vulnerability.

CVE-2008-7074

Sun, 26 Feb 2023 09:11:51 +0000

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled “when displaying the signon message.”

The post CVE-2008-7074 appeared first on CVE Vulnerability.

CVE-2008-6519

Sun, 26 Feb 2023 09:11:34 +0000

Format string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a Long Running Web Process (LRWP) request, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.

The post CVE-2008-6519 appeared first on CVE Vulnerability.

CVE-2008-6520

Sun, 26 Feb 2023 09:11:34 +0000

Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in a URI that ends in (1) .ssi, (2) .shtm, or (3) .shtml, which triggers incorrect logging code involving the sendfmt function in the SMT kernel.

The post CVE-2008-6520 appeared first on CVE Vulnerability.

CVE-2008-6441

Sun, 26 Feb 2023 09:11:31 +0000

Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed package (PKG), and possibly (3) the LEVEL parameter in a WELCOME command.

The post CVE-2008-6441 appeared first on CVE Vulnerability.

CVE-2008-6395

Sun, 26 Feb 2023 09:11:30 +0000

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service (device crash) via a malformed HTTP POST request.

The post CVE-2008-6395 appeared first on CVE Vulnerability.

CVE-2008-5982

Sun, 26 Feb 2023 09:11:17 +0000

Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message.

The post CVE-2008-5982 appeared first on CVE Vulnerability.

CVE-2008-5660

Sun, 26 Feb 2023 09:11:07 +0000

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response.

The post CVE-2008-5660 appeared first on CVE Vulnerability.