560 matches found
Microsoft Office 2007 - OLESSDirectyEntry.CreateTime Type Confusion
Source: https://code.google.com/p/google-security-research/issues/detail?id=465 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testing and reproduction. This bug did not reproduce in Office 2010 ...
Wireshark Protocol Tree Handling Denial of Service Vulnerability
Wireshark is an open source protocol analysis program. Wireshark handles protocol tree entries add there are security holes that allow attackers to exploit vulnerabilities to crash applications...
Mail.ru: Activities are not Protected and able to crash app using other app (Can Malware or third parry app).
Name : ru.mail.mailapp-10570.apk Size : 11.02MB MD5 : 7600e180a1616c7ebb1b1514e23b7d19 Package: ru.mail.mailapp ru.mail.registration.RegistrationActivity ru.mail.ui.writemail.FeedbackActivity ru.mail.ui.writemail.ForwardActivity ru.mail.ui.writemail.ReplyActivity ru.mail.ui.writemail.DraftActivit...
Peercast 0.1211 - Format String
Peercast 0.1211 - Format String Peercast Format String Vulnerability Vendor: peercast.org Product: Peercast Version: = 0.1211 Website: http://www.peercast.org/ BID: 13808 CVE: CVE-2005-1806 OSVDB: 16906 SECUNIA: 15536 PACKETSTORM: 39355 Description: Peercast is a popular p2p streaming media serve...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20150407)
It was found that the Linux kernel's Infiniband subsystem did not properly sanitize input parameters while registering memory regions from user space via the uverbs API. A local user with access to a /dev/infiniband/uverbsX device could use this flaw to crash the system or, potentially, escalate...
Dwarfdump Memory Misreference Denial of Service Vulnerability
Dwarfdump is free tool to easily detect apps and corresponding dSYM. Dwarfdump suffers from a memory misreference denial-of-service vulnerability that allows an attacker to construct malicious files that can be tricked into parsing the application, crashing it...
HackerOne: URL Crashing browser. {Tested on firefox, Chrome and Safari}
Hi again Dear, I am facing a strange behavior when I try to access this particular URL https://hackerone.com/reports/10373 I test it on multiple computer with different browser. Browser goes into indefinite loop and disabled right click ,and after some time it crashes . It seems like the problem ...
Crash Your Friends' WhatsApp Remotely with Just a Message
A Vulnerability has been discovered in the wildly popular messaging app WhatsApp, which allows anyone to remotely crash WhatsApp just by sending a specially crafted message, two security researchers reported ‘The Hacker News’. Two India based independent security researchers, Indrajeet Bhuyan and...
rsyslog: remote denial of service
The rsyslog fix shipped in 8.4.1 for an invalid PRI value see ASA-201410-1 was incomplete, as it did not cover cases where PRI values MAXINT. These values caused an integer overflow, resulting in negative values. Sending a syslog message containing an invalid PRI value to a vulnerable rsyslog...
Air Transfer Iphone 1.3.9 Arbitrary File Download
Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...
LICQ <= 1.3.5 - File Descriptor Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28679/info LICQ is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. A remote attacker can exploit this issue to crash the affected application, denying...
Softrex Tornado WWW-Server 1.2 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7716/info A buffer overflow vulnerability has been reported for Tornado www-Server. The vulnerability exists when Tornado processes overly long HTTP requests. This will result in the server crashing. Although unconfirmed,...
BeOS 5.0 TCP Fragmentation Remote DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1222/info BeOS is vulnerable to a remote TCP fragmentation attack that will crash the target system, requiring a reboot. root@localhost isic-0.05 ./tcpsic -s 1.1.1.1 -d 10.0.1.46 -r 31337 -F100 -V0 -I0 -T0 -u0 -t0 Compile...
Robin Twombly A1 HTTP Server 1.0 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2435/info It is possible for a remote user to cause a denial of service condition in Robin Twombly A1 Server. Submitting a specially crafted request via a telnet connection, could cause the A1 server to crash. A restart o...
Microsoft Pocket Internet Explorer 3.0 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6507/info A denial of service vulnerability has been reported for Pocket Internet Explorer PIE. The vulnerability is due to the way some JavaScript code is interpreted by PIE. By enticing a victim user to browse a...
Armida Databased Web Server 1.0 - Remote GET Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8017/info Armida Databased Web Server is reportedly prone to a remote denial of service when process malicious GET requests. The problem occurs when processing requests containing excessive data. Exploitation of this...
Wiko Mobiles Can be Remotely Crashed with a Text Message
A vulnerability has been identified in Wiko Mobiles that could allow anyone to remotely force it to shut down abruptly with a text message only. Wiko is a two-year-old French Mobile manufacturing company known for its cheapest mobiles and smartphones. French blogger Korben reported that just by...
openSUSE Security Update : rsyslog (openSUSE-SU-2011:1020-1)
Specially crafted log messages could crash rsyslogd CVE-2011-3200. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update rsyslog-5099. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : finch (openSUSE-SU-2012:0066-1)
Remote users could crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601, CVE-2011-4603, CVE-2011-4602, CVE-2011-1091. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-5557...
