CVE-2005-0012

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Analyzed

Related CVEs from 2005

CVE-2005-00137.2nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows l CVE-2005-00147.5Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.CVE-2005-00157.5diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2005-00167.2Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code.CVE-2005-00172.1The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.CVE-2005-00182.1The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.CVE-2005-00194.6Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.CVE-2005-00207.2Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.CVE-2005-00217.2Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 compone CVE-2005-00224.6Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_sp CVE-2005-00232.1gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NO CVE-2005-00335.0Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (cr