CWE-134

High likelihood

Use of Externally-Controlled Format String

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

399 vulnerabilities with CWE-134
CVE-2010-2271
Accoria Rock Web Server 1.4.7 - Remote Format String Injection via authcfg.cgi Password File Parameter
CVE-2010-2094
PHP 5.3 - Format String Vulnerability in phar Extension
CVE-2010-1039
NFS/ONCplus < b.11.31_09 - Remote Code Execution via Format String in RPC Request
CVE-2010-1550
HP OpenView Network Node Manager <7.53 - RCE
CVE-2010-1139
VMware VIX API <1.6 - Privilege Escalation
CVE-2010-0743
tgt < 0.9.5 - Format String Vulnerability in isns.c
CVE-2010-0388
Sun Java System Web Server 7.0 Update 6 - Denial of Service via WebDAV PROPFIND Request Format String
CVE-2009-5141
Jgaa Warftpd - Format String Vulnerability
CVE-2009-4811
VMware ACE 2.6-2.6.1 and 2.5.x-2.5.4 - Denial of Service via Format String in Authentication Daemon
CVE-2009-4775
Ipswitch WS_FTP Professional 12 - Denial of Service via HTTP Response Status Code Format String
CVE-2009-4769
httpdx <1.5 - Remote Code Execution
CVE-2009-3732
VMware ACE 2.5.0-2.5.3 - Remote Code Execution via Format String Vulnerability
CVE-2009-4014
Lintian < 2.3.2 - Use of Externally-Controlled Format String in Check Scripts and Schedule Module
CVE-2009-3617
aria2 < 1.6.2 - Remote Code Execution via Format String in Download URI
CVE-2009-3707
VMware Workstation/Player/ACE/Server DoS via Format String in Auth Daemon
CVE-2009-3663
httpdx Web Server 1.4 - Remote Code Execution via Host Header Format String Specifiers
CVE-2009-3294
PHP 5.2.0-5.2.10 - Denial of Service via popen Mode Argument
CVE-2009-3275
Microsoft Enterprise Library - Denial of Service via Regex Backslash Handling
CVE-2009-3163
SILC Client < 1.1.8 and SILC Toolkit < 1.1.9 - Remote Code Execution via Channel Name Format String
CVE-2009-3051
SILC Client < 1.1.8 and SILC Toolkit < 1.1.10 - Remote Code Execution via Nickname Format String
CVE-2009-2916
Vietcong 2 < 1.10 - Remote Code Execution via Format String in Nickname
CVE-2009-2191
Mac OS X 10.4.11 and 10.5 < 10.5.8 - Remote Code Execution via Login Window Application Name
CVE-2009-2548
Armed Assault <1.14-1.16 beta & II <1.02 - RCE/DoS
CVE-2009-2446
MySQL 4.0.0-5.0.83 - Authenticated Denial of Service via Format String in Database Name
CVE-2009-1886
Samba 3.2.0-3.2.12 - Remote Code Execution via Format String in Filename
Details
Vulnerabilities 399
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits