CWE-134 · Use of Externally-Controlled Format String (page 5)

Page 5 of 5 — CVEs classified under CWE-134, newest first, with CVSS severity and publication dates.

All CVEs classified under CWE-134 — newest first (page 5 of 5)
CVESeverityScorePublishedSummary
CVE-2005-13942005-05-03Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME enviro…
CVE-2005-11222005-04-14Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitra…
CVE-2004-27142004-12-31Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification i…
CVE-2004-23862004-12-31Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via fo…
CVE-2004-16282004-10-23Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code.
CVE-2004-07772004-10-20Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled…
CVE-2004-01792004-06-01Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffi…
CVE-2003-13812003-12-31Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via…
CVE-2003-07382003-10-20The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to cause a denial of service (crash) via a long year parameter.
CVE-2002-01592002-04-22Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (bui…