CVE

Id
67333  
CVE No.
CVE-2013-7386  
Status
Candidate  
Description
Format string vulnerability in the PROJECT::write_account_file function in client/cs_account.cpp in BOINC, possibly 7.2.33, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the gui_urls item in an account file.  
Phase
Assigned (20140602)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
649485 67333 CVE-2013-7386 MLIST:[oss-security] 20130428 Multiple vulnerabilities in BOINC  View
649486 67333 CVE-2013-7386 URL:http://www.openwall.com/lists/oss-security/2013/04/28/3  View
649487 67333 CVE-2013-7386 CONFIRM:http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git;a=commitdiff;h=99258dcecba8ef36e1ce0fd6e0dacffe53613ac9  View
649488 67333 CVE-2013-7386 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=957795  View
649489 67333 CVE-2013-7386 FEDORA:FEDORA-2013-23720  View
649490 67333 CVE-2013-7386 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125128.html  View
649491 67333 CVE-2013-7386 FEDORA:FEDORA-2013-23734  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25044 JVNDB-2013-006619 Drupal 用 Entity API モジュールにおける制限されたエンティティを読まれる脆弱性 Drupal 用 Entity API モジュールには、(a) Views フィールド、または (b) area プラグインを使用する場合、制限されたエンティティを読まれる脆弱性が存在します。 CVE-2013-7391 67333 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006619.html  View