Exploitdb Exploits
3,138 exploits tracked across all sources.
PeerCast 0.1216 - 'nextCGIarg' Remote Buffer Overflow (1)
by prdelka
Alien Arena 2006 Gold Edition 5.00 - DoS
The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers (possibly authenticated) to cause a denial of service (application crash) via a long skin, weapon, or model name.
by Luigi Auriemma
Sauerbraten 2006_02_28 - Denial of Service via Incomplete Client Join Timeout
engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference.
by Luigi Auriemma
LieroX 0.62b - Remote Server/Client Denial of Service
by Luigi Auriemma
Freeciv < 2.0.8 - Denial of Service via Crafted Packets with Negative Compressed Size
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values.
by Luigi Auriemma
Sauerbraten Cube - Denial of Service via Long Input Stream in sgetstr and getint Functions
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.
by Luigi Auriemma
Microsoft Visual Studio and Visual InterDev - Stack-based Buffer Overflow via Long DataProject Field
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbitrary code via a long DataProject field in a (1) Visual Studio Database Project File (.dbp) or (2) Visual Studio Solution (.sln).
by Kozan
libtiff - Stack-based Buffer Overflow via Malformed BitsPerSample Tag
Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.
by Agustin Gianni
CrossFire - Buffer Overflow in socket/request.c
Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and possibly execute code by sending the server a large request.
by Luigi Auriemma
SCO UnixWare <7.1.4 - Privilege Escalation
Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.
by prdelka
PunBB 1.2.10 - Denial of Service via User Registration Flood
register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations.
by K4P0
MySQL 4.x/5.0 (Linux) - User-Defined Function (UDF) Dynamic Library (2)
by Marco Ivaldi
Microsoft Color Management Module - RCE
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.
by darkeagle
D-Link DWL-G700AP 2.00-2.01 - Denial of Service via Malformed HTTP Request
D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service crash) via a request composed of "GET" followed by a space and two newlines, possibly triggering the crash due to missing arguments.
by l0om
D-Link DI-524, DI-624, and DI-784 - Denial of Service via Crafted Fragmented UDP Packets
D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (device reboot) via a series of crafted fragmented UDP packets, possibly involving a missing fragment.
by Aaron Portnoy
Microsoft Windows - ACLs Privilege Escalation (2)
by Andres Tarasco
Microsoft HTML Help Workshop <4.74 - Buffer Overflow
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
by k3xji
Power Daemon < 2.0.2 - Remote Code Execution via Format String in WHATIDO Variable
Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the WHATIDO variable.
by Gotfault Security
OpenVMPS 1.3 - Remote Code Execution via Format String in vmps_log
Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote attackers to execute arbitrary code via unknown vectors.
by Gotfault Security
Microsoft HTML Help Workshop <4.74 - Buffer Overflow
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
by bratax
Sony Ericsson K600i V600i W800i T68i - Denial of Service via Malformed L2CAP Packet
Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet whose length field is less than the actual length of the packet.
by Pierre Betouin
Arescom NetDSL 1000 - Denial of Service via Telnet Connection Flood
The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop.
by Fabian Ramirez
SHOUTcast 1.9.4 - File Request 'Leaked' Format String
by crash-x
Change passwd 3.1 - Buffer Overflow via Long Command Line Arguments
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments.
by rod hedor
Cisco Aironet Wireless Access Points - Authenticated Denial of Service via ARP Table Exhaustion
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644.
by Pasv
By Source