Design/Logic Flaw

The pregquote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose...

FreeBSD : krb5 -- remote denial of service vulnerability (a30573dc-4893-11df-a5f9-001641aeabdf)

An authenticated remote attacker can causing a denial of service by using a newer version of the kadmin protocol than the server supports. The MIT Kerberos team also reports the cause : The Kerberos administration daemon kadmind can crash due to referencing freed memory. %NASLMINLEVEL 70300 C...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0099-1)

Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-2267. The text description of this plugin is...

Mozilla Firefox Multiple Memory Corruption Vulnerabilities Nov-09 (Linux)

This host is installed with Mozilla Firefox and is prone to multiple memory vorruption vulnerabilities. OpenVAS Vulnerability Test $Id: gbfirefoxmultmemcrptnvulnnov09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Memory Corruption Vulnerabilities Nov-09 Linux Authors: Sharat...

Mozilla Firefox < 3.0.14 / 3.5.3 Multiple Vulnerabilities

Binary data 801311.prm...

GeoVision LiveAudio ActiveX Remote Freed-Memory Access Exploit

No description provided by source. !-- 02/03/2009 14.57.46 GeoVision LiveAudio ActiveX Control GetAudioPlayingTime remote freed-memory access exploit IE7 by Nine:Situations:Group::trotzkista vendor site: http://www.geovision.com.tw/ our site: http://retrogod.altervista.org/ details: CLSID:...

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access

GeoVision LiveAudio - ActiveX Remote Freed-Memory Access // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

XFCS multiple security vulnerabilities

Buffer overflow, access to free'd memory...

GLSA-200801-06 : Xfce: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-06 Xfce: Multiple vulnerabilities Gregory Andersen reported that the Xfce4 panel does not correctly calculate memory boundaries, leading to a stack-based buffer overflow in the launcherupdatepanelentry function CVE-2007-653...

CVE-2004-2680

modpython libapache2-mod-python 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon kadmind and other products that use this library, calls an uninitialized function pointer in freed...

DEBIAN-CVE-2006-6143

The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon kadmind and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service crash and possibl...

JavaScript garbage-collection hazard audit — Mozilla

Igor Bukanov has audited the JavaScript engine for routines that use temporary variables not protected against garbage-collection. If malicious content could cause garbage-collection to run during the lifetime of these temporaries then the original routine would end up operating on freed memory...

CVE-2006-0294

Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory...

CVE-2004-1093

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."...

DEBIAN-CVE-2004-1093

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."...

DEBIAN-CVE-2005-0718

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

security flaw

The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service application crash via a certain packet that causes the dissector to access previously-freed memory...

CVE-2004-1093

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."...

CVE-2004-1093

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."...