CVE-2012-6701

CVE-2012-6701 : An integer overflow in fs/aio.c of the Linux kernel before 3.4.1 allows local users to trigger a denial of service (and possibly other impact) via a large AIO iovec. Public sources describe exploitation locally and indicate a fix was applied in 3.4.1 (Linux kernel changelog refere...

CVE-2012-6701

Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec...

UBUNTU-CVE-2015-8830

Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec. NOTE: this vulnerability exists because of a CVE-2012-6701 regression...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to obtain sensitive information about color objects from proces...

Design/Logic Flaw

The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information...

CVE-2015-6701

Technical details for CVE-2015-6701 are not publicly provided in the connected documents. The sources describe related vulnerabilities but do not specify affected products/versions/root cause/fixes for this CVE. Monitor for updates.

CVE-2014-6701

The CVE-2014-6701 entry concerns the Vendormate Mobile Android app (com.vendormate.mobile) version 3.0. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling potential man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...

CVE-2013-6701

Cisco ONS 15454 devices running software 9.6 or earlier are affected by CVE-2013-6701 due to a flaw in the tNetTaskLimit process within the Transport Node Controller (TNC) that fails to properly prioritize health pings. A flood of network traffic can cause a watchdog timeout and TNC reset, enabli...

CVE-2013-6701

The tNetTaskLimit process on the Transport Node Controller TNC on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service watchdog timeout and TNC reset via a flood of network traffic, aka Bug ID...

CVE-2008-6701

NetScout Visualizer V2100 and InfiniStream i1730 expose a direct access path to ResourceManager/en_US/domains/add_domain.jsp, allowing remote attackers to obtain administrator privileges. The issue arises from lack of access restriction on this resource, enabling privilege escalation via a direct...

Novell客户端nwspool.dll EnumPrinters RPC请求远程栈溢出漏洞

BUGTRAQ ID: 27741 CVECAN ID: CVE-2008-0639 Novell Client是允许NetWare连接到Windows的工作站软件。 Novell Client的Spooler服务（nwspool.dll）负责处理通过spoolss命名管道所提交的RPC请求，该DLL所暴露的EnumPrinters函数存在逻辑错误，允许远程攻击者通过提交恶意的RPC请求触发栈溢出，导致执行任意指令。 出现这个漏洞是由于没有正确地修复CVE-2007-6701漏洞。 Novell Client 4.91 SP4 Novell Client 4.91 SP3 Novell...

CVE-2007-6701

Multiple stack-based buffer overflows in the Spooler service nwspool.dll in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954...

CVE-2007-6701

Multiple stack-based buffer overflows in the Spooler service nwspool.dll in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954...

CVE-2007-6701

CVE-2007-6701 covers multiple stack-based buffer overflows in the Spooler service (nwspool.dll) of Novell Client 4.91 SP4 for Windows, enabling remote code execution via long RPC arguments. The incident is described across multiple sources as a separate issue from CVE-2007-2954, with the vulnerab...

Novell Client 4.91 SP4 nwspool.dll buffer overflow

Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...