CWE-134

399 vulnerabilities with CWE-134

CVE-2007-3917

Wesnoth 1.2.x < 1.2.7 and 1.3.x < 1.3.9 - Denial of Service via Multiplayer Message Truncation

CVE-2007-5262

Battlefront Dropteam < 1.3.3 - Remote Code Execution via Format String in Packet 0x01

CVE-2007-5265

dawn_of_time < 1.69s_beta4 - Remote Code Execution via Format String in Username or Password

CVE-2007-5247

First Encounter Assault Recon < 1.08 - Remote Code Execution via Format String in PB_Y or PB_U Packets

CVE-2007-5248

Doom 3 < 1.3.1, Quake 4 < 1.4.2, Prey < 1.3 - Remote Code Execution via Format String in PB_Y/PB_U Packets

CVE-2007-5184

smbftpd 0.96 - Remote Code Execution via Format String in Directory Name

CVE-2007-4832

CellFactor Revolution < 1.03 - Remote Code Execution via Format String in Nickname

CVE-2007-4754

Alien Arena 2007 < 6.10 - Denial of Service via Format String in Nickname

CVE-2007-4550

ALPass 2.7 English and 3.02 Korean - Remote Code Execution via Format String Specifiers in APW File

CVE-2007-4273

IBM DB2 Universal Database < 8.0 and < 9.1 - Local Code Execution via Format String Attack

CVE-2007-0753

macOS 10.3.9 and 10.4.9 - Local Remote Code Execution via VPN Daemon Format String

CVE-2007-2655

SurgeMail Webmail 3.1s-1 - Remote Code Execution via Format String Vulnerability

CVE-2007-2027

Elinks 0.11.1 - Format String Injection via Untrusted Gettext Message Catalog

CVE-2007-1251

Netrek Vanilla Server 2.12.0 - Remote Code Execution via Format String in Warning Message

CVE-2007-1006

Ekiga < 2.0.4 - Denial of Service and Remote Code Execution via Q.931 SETUP Packet

CVE-2007-0454

Samba 3.0.6-3.0.23d - Remote Code Execution via AFS VFS Module Format String

CVE-2007-0646

iMovie HD 6.0.3 and Safari in Mac OS X 10.4-10.4.10 - Denial of Service via Format String in Filename

CVE-2007-0344

Colloquy < 2.1 - Remote Code Execution via Format String in INVITE Channel Name

CVE-2007-0051

Apple iPhoto < 6.0.6 - Remote Code Execution via Crafted Photocast RSS Feed Title

CVE-2007-0017

VLC Media Player 0.7.0-0.8.6 - Remote Code Execution via Format String in CDDA/VCDX URI Handler

CVE-2006-6772

w3m - Remote Code Execution via Format String in SSL Certificate Common Name

CVE-2006-6751

XM Easy Personal FTP Server <5.2.1 - DoS

CVE-2006-3469

MySQL Server 4.1 < 4.1.21 and 5.0 < 1 April 2006 - Authenticated Denial of Service via date_format Function

CVE-2006-3628

Ethereal - Format String Vulnerability

CVE-2006-3573

Milan Mimica Sparklet < 0.9.4 - Remote Code Execution via Format String in Player Nickname