CVE-2012-5427

CVE-2012-5427 affects Cisco IOS Unified Border Element (CUBE) prior to version 15.3(2)T. A remote authenticated user can cause a denial of service (input queue wedge) by sending a crafted series of RTCP packets (Bug ID CSCuc42518). The NVD record notes a CVSS v2 base score of 4.0 (Medium) with ne...

CVE-2012-5037

The ACL implementation in Cisco IOS before 15.11SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service device reload via a "no object-group" command followed by an object-group command, aka Bug ID CSCts16133...

CVE-2012-1366

CVE-2012-1366 affects Cisco IOS on ASR 1000 devices prior to 15.1(1)SY, where enabling IPv6 Multicast Listener Discovery (MLD) tracking allows remote attackers to cause a denial of service (device reload) by sending crafted MLD packets (Bug ID CSCtz28544). Connected sources confirm the vulnerabil...

CVE-2012-4638

Cisco IOS before 15.1(1)SY is affected by CVE-2012-4638, where local users can trigger a denial of service (device reload) by establishing an outbound SSH session (Bug ID CSCto00318). The impact is a local-privilege-independent DoS that can reboot the device; no exploitation details are provided ...

CVE-2012-0360

CVE-2012-0360 affects Cisco IOS before 15.1(1)SY. The issue is a memory leak triggered when IKEv2 debugging is enabled, allowing remote attackers to cause a denial of service through crafted packets (Bug ID CSCtn22376). Exploitation status, affected versions beyond the cited baseline, and precise...

CVE-2012-4638

Cisco IOS before 15.11SY allows local users to cause a denial of service device reload by establishing an outbound SSH session, aka Bug ID CSCto00318...

CVE-2012-3062

Cisco IOS before 15.1(1)SY is affected by CVE-2012-3062. When Multicast Listener Discovery (MLD) snooping is enabled, remote attackers can cause denial of service (CPU consumption or device crash) by sending MLD packets in networks with many IPv6 hosts. This entry provides the vulnerability descr...

CVE-2012-5017

CVE-2012-5017 affects Cisco IOS before 15.1(1)SY1. The issue arises in the VPN/IKEv2 processing where remote authenticated users can trigger a denial of service (device reload) by establishing a VPN session and sending malformed IKEv2 packets. Connected documents confirm the vulnerable condition,...

CVE-2012-3918

Cisco IOS

CVE-2012-0871

The sessionlinkx11socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/...

DEBIAN-CVE-2012-0871

The sessionlinkx11socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/...

CVE-2012-6646

F-Secure Anti-Virus, Safe Anywhere, and PSB Workstation Security before 11500 for Mac OS X allows local users to disable the Mac OS X firewall via unspecified vectors...

CVE-2012-0871

The sessionlinkx11socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/...

CVE-2012-6646

F‑Secure Anti‑Virus, Safe Anywhere, and PSB Workstation Security for macOS versions prior to 11500 are affected. CVE‑2012‑6646 is described as allowing local users to disable the macOS firewall via unspecified vectors; the connected documents provide product names and a version floor but do not r...

CVE-2012-0871

CVE-2012-0871 concerns systemd-logind’s session_link_x11_socket vulnerability in systemd (possibly 37 and earlier). A local user can exploit a symlink attack on /run/user/ to create or overwrite arbitrary files via login/logind-session.c. Multiple sources confirm the issue and describe affected c...

Design/Logic Flaw

The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service hang by sending a multi-object request with an Object ID OID containing more subids than previous requests, a different vulnerability than CVE-2012-6151...

Office”combination”formula exploits the sample analysis-vulnerability warning-the black bar safety net

by hcl, nine8 of code audit labs of vulnhunt.com 1 Overview Online disclosure of a suspected CVE-2 0 1 4-1 7 6 1 RTF sample, hanhai source analysis found that the sample is not a CVE-2 0 1 4-1 7 6 1, but in a RTF sample includes both the two vulnerabilities, respectively, for the CVE-2 0 1 2-0 1 ...

Apple QuickTime QTVR QTVRStringAtom Parsing Buffer Overflow - Ver2 (CVE-2012-0667)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a signedness error when processing a specially crafted QTVR string. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cau...

Microsoft Excel SST Invalid Length Use After Free - Ver2 (CVE-2012-1887)

A use-after-free vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

Microsoft Excel File Format OBJECTLINK Record Memory Corruption - Ver2 (CVE-2012-0142)

A memory corruption vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in the way Microsoft Excel handles memory when opening specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrar...