PT-2007-6408 · Mozilla +1 · Firefox +3

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 2.0.0.8 Thunderbird versions prior to 2.0.0.8 SeaMonkey versions prior to 1.1.5 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, via crafted HTML that trigger...

Design/Logic Flaw

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

DEBIAN-CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

CVE-2007-3372

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

CVE-2007-3372: Undefined Security Weakness

The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service exit via empty TXT data over D-Bus, which triggers an assert error...

Integer overflow

Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert statement. NOTE: this issue is due to an...

CVE-2007-2799

Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert statement. NOTE: this issue is due to an...

Pulseaudio 0.9.5 (rev 1437) termination

Luigi Auriemma Application: PulseAudio http://www.pulseaudio.org Versions: 0.9.5 svn 1437 Platforms: POSIX and Win32 Bugs: termination of the server through failed assert Exploitation: local and remote Date: 29 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

PulseAudio sound server DoS

Multiple invalid assertusage, e.g. on empty request...

Microsoft Visual Studio 64-bit time functions DoS

Invalid use of assert-style macro causes application termination for timet values behind MAXTIME64T January, 1 3000...

CVE-2006-3464

CVE-2006-3464 affects the TIFF library (libtiff) up to version 3.8.1; the issue arises from large offset values in a TIFF directory causing an integer overflow and triggering unchecked arithmetic operations. This can lead to context-dependent attackers potentially executing code or causing a cras...

CVE-2006-3673: Undefined Security Weakness

nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service application crash via a large owner value, which causes an assert error...

CVE-2006-3492

CVE-2006-3492 concerns MICO (Mico Is CORBA) up to version 2.3.12. The vulnerability is in CORBA::ORBInvokeRec::set_answer_invoke (orb.cc), where processing a message with an incorrect object key can cause an assertion failure, leading to an application crash (remote denial of service). The availa...

CVE-2006-3492: Undefined Security Weakness

The CORBA::ORBInvokeRec::setanswerinvoke function in orb.cc in MICO Mico Is CORBA 2.3.12 and earlier allows remote attackers to cause a denial of service application crash via a message with an incorrect "object key", which triggers an assert error...

Apple OpenDirectory DoS

slapd assert on malformed bind request...

Design/Logic Flaw

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service crash via an invalid LDAP request that triggers an assert error...

CVE-2006-1470

OpenLDAP in Apple Mac OS X 10.4.x up to 10.4.6 is affected by a DoS due to an assertion error triggered by a malformed LDAP request. The vulnerability enables a remote attacker to crash the Open Directory/OpenLDAP server. Affected products are Apple Mac OS X/macOS Open Directory deployments using...

CVE-2006-1470: Undefined Security Weakness

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service crash via an invalid LDAP request that triggers an assert error...

CVE-2006-2789

Evolution 2.2.x/2.3.x on GNOME 2.7/2.8 is affected. When the option “load images if sender in addressbook” is enabled, a crafted From header can trigger an assert in camel-internet-address.c using a null pointer, causing a persistent crash (denial of service). This vulnerability is evidenced acro...