WebKit JSC AbstractValue::set Use-After-Free

WebKit: JSC: A bug in AbstractValue::set CVE-2018-4443 void AbstractValue::setGraph& graph, RegisteredStructure structure RELEASEASSERTstructure; mstructure = structure; marrayModes = asArrayModesstructure-indexingType; mtype = speculationFromStructurestructure.get; mvalue = JSValue;...

Apple iTunes < 12.9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.2. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209345 advisory. - Visiting a malicious website may lead to address bar spoofing CVE-2018-4440 - Visiting a malicious website may lead...

KLA11384 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities can be exploited remotely to spoof user interface; 2. Multiple memory...

CVE-2017-4443

...

CVE-2017-4443

CVE-2017-4443 is rejected/not used per the description; not an active vulnerability entry.

CVE-2016-4443

The CVE-2016-4443 issue affects Red Hat Virtualization Manager (RHEV/RHV) 3.6. A local attacker could read the engine-setup log file and obtain sensitive data, including encryption keys and certificates, due to improper logging of setup results. The root cause is leakage of confidential informati...

RHEL 6 : Virtualization Manager (RHSA-2016:1929)

An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Null pointer dereference

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to cause a denial of service NULL pointer dereference via...

CVE-2015-4443

CVE-2015-4443 describes a denial-of-service (null pointer dereference) vulnerability in Adobe Acrobat/Reader. Affected products include Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat/Reader DC Classic before 2015.006.30060, and DC Continuous before 2015.008.20082 on...

KLA10628 Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

CVE-2014-4443

CVE-2014-4443 affects Apple macOS X prior to 10.10. The vulnerability is a remote denial of service via a NULL pointer dereference when handling crafted ASN.1 data. The issue is rooted in how ASN.1 data is processed, allowing an attacker to induce a crash without requiring user interaction. Impac...

CVE-2013-4443

CVE-2013-4443 is rejected and not used as a security issue.

CVE-2013-4443

...

CVE-2012-4443

CVE-2012-4443 affects Monkey HTTP Daemon 0.9.3. The issue stems from the daemon executing CGI scripts with real UID/GID of root, enabling local users to potentially gain privileges by exploiting write access to cgi-bin. This is a local-privilege-escalation path described in multiple sources. No r...

CVE-2012-4443

Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access...

CVE-2010-4443

The CVE-2010-4443 entry relates to an unspecified local vulnerability in Oracle Solaris 10 and 11 Express, related to Kernel/NFS, affecting availability. Affected component: Solaris kernel/NFS path. Root cause details are not provided in the documents. Exploitation status and concrete mitigations...

Sun Java System DSEE Multiple Vulnerabilities (Windows)

This host is running Sun Java System Directory Server Enterprise Edition DSEE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsunjavadirservermultvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Sun Java System DSEE Multiple Vulnerabilities Windows Authors: Sharath ...

CVE-2009-4443

CVE-2009-4443 is a denial-of-service issue in the psearch (persistent search) functionality of Sun Java System Directory Proxy Server (DPS), part of Sun Java System Directory Server Enterprise Edition, versions 6.0–6.3.1. The vulnerability allows remote attackers to trigger a psearch thread loop,...

NetBSD malformed ICMPv6 MLD-QUERY denial of service

Overview NetBSD fails to properly handle ICMPv6 MLD query packets, which can allow a remote, unauthenticated attacker to cause a denial of service. Description ICMPv6, which is defined in RFC 4443, is a version of the ICMP protocol for IPv6. Multicast Listener Discovery MLD for IPv6, which is...

CVE-2007-4443

The CVE-2007-4443 entry concerns the Windows UCC dedicated server for the Unreal engine (likely 2003/2004) where remote attackers can trigger a DoS by sending strings containing many 0x07 characters via requests to the images/ directory, the Content-Type header, a HEAD request, or other vectors. ...