CWE-134: Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- bmc patrol agentFormat string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute...10.0 High
- gnome vinagreFormat string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in...6.8 Medium
- mysqlMySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' ...4.0 Medium
- hp openvmsFormat string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows...4.4 Medium
- ipswitch ws ftp home, ws ftp pro +1 moreFormat string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0...9.3 High
- gnome, gnome yelp +1 moreFormat string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after...10.0 High
- sun opensolaris, solaris, sunos +2 moreMultiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris...9.3 High
- hanghai 5th street, high street 5, hot step +2 moreFormat string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company)...10.0 High
- apple mac os x, mac os x server +1 moreFormat string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted...6.8 Medium
- emc diskxtenderFormat string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated...9.0 High
- freedesktop policykitFormat string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and...4.6 Medium
- ibm soliddbFormat string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows...6.8 Medium
- mg-soft net inspectorFormat string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6...4.3 Medium
- asterisk open sourceFormat string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote...5.8 Medium
- apple mac os x, mac os x server +1 moreFormat string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to...6.9 Medium
- mcafee agent, cma, epolicy orchestrator +1 more +3 moreFormat string vulnerability in the logDetail function of applib.dll in McAfee Common Management...5.4 Medium
- linux kiss server kiss serverFormat string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when...6.8 Medium
- gnome evolutionFormat string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in...6.8 Medium
- crytek crysisFormat string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote...6.0 Medium
- icq mirabilis icqFormat string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build...9.3 High
- netwin surgemail, webmail +1 moreFormat string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and...7.5 High
- ipswitch imserver, instant messaging +1 moreFormat string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in...3.5 Low
- larson software technology network print serverFormat string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2...10.0 High
- cyan soft cyanprintip easy opi, cyanprintip basic, cyanprintip professional +3 more +5 moreFormat string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft...7.5 High
- novell identity managerThe Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity...5.0 Medium
- apple mac os xFormat string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to...9.3 High
- sonicwall global vpn clientMultiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3...9.3 High
- ruby gnome2 gnome2gtk2 vulnerable to Use of Externally-Controlled Format String6.8 Medium
- sun net connect softwareFormat string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4,...7.2 High
- miranda-im miranda imFormat string vulnerability in the ext_yahoo_contact_added function in yahoo.c in Miranda IM 0.7...6.8 Medium
- firefly media serverFormat string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media...7.5 High
- vergenet perdition mail retrieval proxyThe format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and...7.5 High
- oracle enterprise grid console server, opmn daemon +1 moreFormat string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle...10.0 High
- tibco smart pgm fxFormat string vulnerability in TIBCO SmartPGM FX allows remote attackers to execute arbitrary...7.5 High
- kaspersky lab online scannerMultiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan...9.3 High
- wesnothThe multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers...7.8 High
- dawnoftime dawn of timeMultiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier...7.5 High
- battlefront dropteamMultiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote...7.5 High
- id software doom 3, quake 4, take2games prey +2 moreMultiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1...9.3 High
- monolith productions first encounter assault reconMultiple format string vulnerabilities in the Monolith Lithtech engine, as used by First...9.3 High
- smbftpdFormat string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote...7.5 High
- immersion games cellfactor revolutionFormat string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to...7.5 High
- cor entertainment alien arena 2007Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena...7.5 High
- altools alpassFormat string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted...5.1 Medium
- ibm db2 universal databaseIBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local users to create arbitrary...4.6 Medium
- apple mac os x, mac os x server +1 moreFormat string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows...7.2 High
- netwin surgemail, webmail +1 moreUnspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact...7.5 High
- elinksUntrusted search path vulnerability in the add_filename_to_string function in intl/gettext...4.4 Medium
- netrek vanilla serverFormat string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla...9.3 High
- ekigaMultiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga...10.0 High
- Show moreLoading…