Integer overflow

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...

CVE-2010-0649

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...

CVE-2010-0649

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...

CVE-2010-0649

CVE-2010-0649 affects Google Chrome prior to 4.0.249.89. The vulnerability lies in the sandbox’s CrossCallParamsEx::CreateFromBuffer (sandbox/src/crosscall_server.cc) where an integer overflow during deserialization of sandbox messages can lead to renderer-accessible heap memory corruption and a ...

CVE-2010-0649

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...

CVE-2010-0160

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

Web Worker Array Handling Heap Corruption Vulnerability — Mozilla

Security researcher Orlando Barrera II of SecTheory reported, via TippingPoint's Zero Day Initiative, that Mozilla's implementation of Web Workers contained an error in its handling of array data types when processing posted messages. This error could be used by an attacker to corrupt heap memory...

Apple QuickTime Color Table ID Heap Corruption (CVE-2007-0718)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processing Apple QuickTime Image File format, which is a proprietary format created by Apple...

RealPlayer: rule book handling heap corruption

Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption...

Subversion svn Protocol String Parsing (CVE-2004-0413)

Subversion is a revision control system that handles svn protocol requests. A specially crafted svn request could cause svnserve, the daemon that handles svn protocol requests, to allocate insufficient heap memory and overflow the heap. It is possible for a malicious attacker to run arbitrary cod...

Heap overflow

Heap-based buffer overflow in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a fil...

SuSE Update for krb5 SUSE-SA:2010:006

Check for the Version of krb5 OpenVAS Vulnerability Test SuSE Update for krb5 SUSE-SA:2010:006 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

ZDI-10-005: RealNetworks RealPlayer ASMRulebook Remote Code Execution Vulnerability

ZDI-10-005: RealNetworks RealPlayer ASMRulebook Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-005 January 21, 2010 -- CVE ID: CVE-2009-4241 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

openSUSE Security Update : krb5 (krb5-1792)

Specially crafted ticket requests could crash the kerberos server CVE-2009-3295. Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer underflow that leads to heap memory corruption CVE-2009-4212. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : krb5 (krb5-1795)

Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer overflow leads to heap memory corruption CVE-2009-4212. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Google SketchUp Multiple Vulnerabilities (Windows)

This host is installed with Google SketchUp and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglesketchupmultvulnjan10win.nasl 7174 2017-09-18 11:48:08Z asteins $ Google SketchUp Multiple Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2010...

SuSE 11 Security Update : Kerberos 5 (SAT Patch Number 1796)

Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer underflow that leads to heap memory corruption CVE-2009-4212. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : krb5 (krb5-1795)

Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer overflow leads to heap memory corruption CVE-2009-4212. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 6775)

Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer overflow leads to heap memory corruption CVE-2009-4212. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Integer overflow

Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service heap memory corruption or possibly execute arbitrary code via a crafted SKP file...