Lucene search
+L

780 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/15 12:00 a.m.•7 views

CVE-2010-2161: Improper Control of Generation of Code

Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."...

9.3CVSS6.5AI score0.07127EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2010/06/14 10:28 p.m.•12 views

flash-plugin: multiple security flaws (APSB10-14)

Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."...

9.3CVSS6.2AI score0.07127EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2010/06/11 4:32 p.m.•14 views

flash-plugin: multiple security flaws (APSB10-14)

Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."...

9.3CVSS6.2AI score0.07127EPSS
SaveExploits0References4
OSV
OSV
•added 2010/05/22 12:00 a.m.•38 views

DSA-2048-1 dvipng - arbitrary code execution

Bulletin has no description...

4.3CVSS9.3AI score0.04539EPSS
SaveExploits1
NVD
NVD
•added 2010/05/13 5:30 p.m.•37 views

CVE-2010-0129

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...

9.3CVSS8.9AI score0.06301EPSS
SaveExploits1References11
Prion
Prion
•added 2010/05/13 5:30 p.m.•28 views

Integer overflow

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...

9.3CVSS8.4AI score0.06301EPSS
SaveExploits1References11Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/13 12:00 a.m.•5 views

CVE-2010-0129: Integer Overflow or Wraparound

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted .dir aka Director file that triggers an array index error...

9.3CVSS6.4AI score0.06301EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2010/03/22 12:00 a.m.•40 views

CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386

Check for the Version of evolution28-pango OpenVAS Vulnerability Test CentOS Update for evolution28-pango CESA-2010:0140 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

4.3CVSS6.4AI score0.02448EPSS
SaveExploits0References2
Prion
Prion
•added 2010/03/18 5:30 p.m.•25 views

Design/Logic Flaw

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS6.6AI score0.02448EPSS
SaveExploits0References15Affected Software1
NVD
NVD
•added 2010/03/18 5:30 p.m.•22 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS6.1AI score0.02448EPSS
SaveExploits0References15
Cvelist
Cvelist
•added 2010/03/18 5:12 p.m.•43 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

5.9AI score0.02448EPSS
SaveExploits0References15
Mend
Mend
•added 2010/03/18 5:12 p.m.•1 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

6.3CVSS0.02448EPSS
SaveExploits0References16
Debian CVE
Debian CVE
•added 2010/03/18 5:12 p.m.•43 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS5.9AI score0.02448EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2010/03/18 12:00 a.m.•29 views

CVE-2010-0421

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS5.9AI score0.02448EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/18 12:00 a.m.•5 views

CVE-2010-0421: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

4.3CVSS5.9AI score0.02448EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2010/03/17 1:04 p.m.•17 views

array index error in dtoa implementation of many products

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

6.8CVSS7.2AI score0.28054EPSS
SaveExploits49References4
RedHat Linux
RedHat Linux
•added 2010/03/17 12:38 p.m.•13 views

array index error in dtoa implementation of many products

Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...

6.8CVSS7.2AI score0.28054EPSS
SaveExploits49References4
RedHat Linux
RedHat Linux
•added 2010/03/15 11:02 p.m.•38 views

Moderate: Red Hat Security Advisory: pango security update

Updated pango and evolution28-pango packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pango is a library used for the layout and rendering of...

4.3CVSS5.7AI score0.02448EPSS
SaveExploits0References2
Prion
Prion
•added 2010/02/26 6:30 p.m.•22 views

Command injection

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

2.6CVSS7.1AI score0.01589EPSS
SaveExploits1References8Affected Software1
UbuntuCve
UbuntuCve
•added 2010/02/26 6:30 p.m.•37 views

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

2.6CVSS5.9AI score0.01589EPSS
SaveExploits1References1
Rows per page
Query Builder