CWE-134

High likelihood

Use of Externally-Controlled Format String

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

399 vulnerabilities with CWE-134
CVE-2008-1658
PolicyKit <0.7 - DoS/Code Injection
CVE-2008-1705
IBM solidDB 06.00.1018 - Remote Code Execution via Format String Specifiers in Logging Function
CVE-2008-1401
MG-SOFT Net Inspector <6.5.0.828 - RCE
CVE-2008-1333
Asterisk Open Source <1.6.0-beta6 - RCE
CVE-2008-0989
Apple Mac OS X 10.5.2 - Local Format String Vulnerability via mDNSResponderHelper
CVE-2008-1357
McAfee Common Management Agent <= 3.6.0.574 - Remote Code Execution via Format String in AgentWakeup Request
CVE-2008-1206
Linux Kiss Server 1.2 - Format String
CVE-2008-0072
Evolution < 2.12.3 - Remote Code Execution via Encrypted Message Format String
CVE-2008-1127
Crysis 1.1.1.5879 - Authenticated Remote Code Execution via Format String in User Name
CVE-2008-1120
Mirabilis ICQ 6 build 6043 - Remote Code Execution via Format String in HTML Code Generation
CVE-2008-1055
SurgeMail < 38k4 and WebMail < 3.1s - Remote Code Execution via Format String in Page Parameter
CVE-2008-0945
Ipswitch IM Server < 2.0.8.1 - Authenticated Denial of Service via Format String in IP Address Field
CVE-2008-0764
Larson Network Print Server < 9.4.2 - Remote Code Execution via Format String in USEP Command
CVE-2008-0755
cyanPrintIP and Opium4 OPI Server < 4.10.1030 - Remote Code Execution via Format String in LPD Queue Name
CVE-2007-6625
Novell Identity Manager 3.5.1 - Denial of Service via Format String in Platform Service Process
CVE-2007-4708
Apple Mac OS X 10.4.11 - Remote Code Execution via Address Book URL Handler Format String
CVE-2007-6273
SonicWALL GLobal VPN Client <4.0.0.810 - RCE
CVE-2007-6183
Ruby-GNOME2 < 0.17.0 - Use-After-Free in mdiag_initialize
CVE-2007-3880
Sun Remote Services Net Connect 3.2.3-3.2.4 - Local Privilege Escalation via Format String in srsexec
CVE-2007-5396
Miranda IM 0.7.1 - Remote Code Execution via Format String in Yahoo Buddy Authorization
CVE-2007-5825
Firefly Media Server <= 0.2.4 - Remote Code Execution via Format String in HTTP Authorization Header
CVE-2007-5740
Perdition Mail Retrieval Proxy < 1.17 - Remote Code Execution via IMAP Tag Format String Injection
CVE-2007-5545
TIBCO SmartPGM FX - Remote Code Execution via Format String Specifiers
CVE-2007-5561
Oracle Enterprise Grid Console Server 10.2.0.1 - Remote Code Execution via Format String in HTTP URI
CVE-2007-3675
Kaspersky Online Scanner < 5.0.93 - Remote Code Execution via Format String Vulnerability
Details
Vulnerabilities 399
Exploit Likelihood High