Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dia 文件名 远程格式化字符串漏洞
Vulnerability Description
Dia 0.94存在格式化字符串漏洞。用户协助的攻击者可以通过触发错误或警告来引起拒绝服务(崩溃)，比如借助 .bmp文件名中的格式化字符串限定符。注意: 原来的利用方式是通过命令行自变量体现的，但还存在由Dia自动处理的其他输入机制，例如特制的.dia文件。
CVSS Information
N/A
Vulnerability Type
N/A