CWE-134

399 vulnerabilities with CWE-134

CVE-2012-2288

EMC NetWorker 7.6.3-7.6.4 and 8.0 - Remote Code Execution via nsrd RPC Service Format String

CVE-2012-1851

Windows Print Spooler Service - Remote Code Execution via Format String Vulnerability

CVE-2012-2090

FlightGear and SimGear < 2.6.0 - Format String Vulnerability via Aircraft XML Model

CVE-2012-2369

pidgin-otr < 3.2.0 - Remote Code Execution via Format String in Log Message

CVE-2012-0646

iPhone OS < 5.1 - Remote Code Execution via VPN Racoon Configuration File

CVE-2012-0242

Advantech WebAccess < 7.0 - Remote Code Execution via Format String Specifiers

CVE-2012-0809

sudo 1.8.0-1.8.3p1 - Local Use-After-Free via Format String in sudo_debug

CVE-2011-10029 HIGH

Solar FTP Server < 2.1.1 - Denial of Service via USER Command Format String

CVE-2011-1588 HIGH

Thunar < 1.3.1 - Denial of Service via Format String Error in File Name Handling

CVSS 7.8

CVE-2011-4930

Condor 7.2.0-7.6.4 - Format String Vulnerability via Job Hold Reason or Filename

CVE-2011-4357

Clearsilver < 0.10.5 - Format String Vulnerability via Python CGI Kit Error Handling

CVE-2011-0185

Apple Mac OS X <10.7.2 - Privilege Escalation

CVE-2011-1764

Exim < 4.76 - Remote Code Execution via DKIM Logging Format String

CVE-2011-2475

Sybase OneBridge Mobile Data Suite 5.5-5.6 - Remote Code Execution via Format String

CVE-2011-1568

7-Technologies IGSS <9.00.00.11074 - RCE

CVE-2011-0173

Apple Mac OS X < 10.6.7 - Remote Code Execution via AppleScript Display Dialog Format String

CVE-2011-1153

PHP < 5.3.5 - Format String Vulnerability in phar_object.c

CVE-2011-0270

HP OpenView Network Node Manager 7.51 and 7.53 - Remote Code Execution via Format String in nnmRptConfig.exe

CVE-2010-10017 HIGH

WM Downloader 3.1.2.2 - Buffer Overflow

CVE-2010-3438 CRITICAL

libpoe-component-irc-perl <6.32 - Code Injection

CVSS 9.8

CVE-2010-4235

RealNetworks Helix Server and Helix Mobile Server < 14.2 - Remote Code Execution via x-wap-profile HTTP Header

CVE-2010-4013

Mac OS X 10.6.x < 10.6.6 - Remote Code Execution via PackageKit Format String

CVE-2010-2950

PHP 5.3.x-5.3.3 - Format String Vulnerability in phar_stream_flush

CVE-2010-2451

KVIrc 3.4 and 4.0 - Use of Externally-Controlled Format String in DCC Functionality

CVE-2010-1376

Mac OS X 10.6 - Remote Code Execution via Format String in Network Authorization URL Handling