PT-2012-3167

Name of the Vulnerable Software and Affected Versions Logitec LAN-W300N/R routers versions prior to 2.27 Description The issue concerns improper restriction of login access, allowing remote attackers to gain administrative privileges and modify settings. This is related to vectors involving PPPoE...

CVE-2011-3085: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service UI corruption and possibly conduct spoofing attacks via vectors involving long values...

CVE-2012-0237: Improper Restriction of Operations within the Bounds of a Memory Buffer

Advantech/BroadWin WebAccess before 7.0 allows remote attackers to 1 enable date and time syncing or 2 disable date and time syncing via a crafted URL...

CVE-2011-2348: Improper Restriction of Operations within the Bounds of a Memory Buffer

Google V8, as used in Google Chrome before 12.0.742.112, performs an incorrect bounds check, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-2117: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128...

CVE-2010-4695: Improper Restriction of Operations within the Bounds of a Memory Buffer

A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png2.5.2-1 on Debian GNU/Linux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories...

CVE-2009-3873: Improper Restriction of Operations within the Bounds of a Memory Buffer

The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968...

CVE-2009-3571: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in OpenOffice.org OOo has unknown impact and client-side attack vector, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka "Client-side exploit." NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco...

CVE-2008-3247: Improper Restriction of Operations within the Bounds of a Memory Buffer

The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x8664 platforms uses an incorrect size for ldtdesc, which allows local users to cause a denial of service system crash or possibly gain privileges via unspecified vectors...

CVE-2008-2716: Improper Restriction of Rendered UI Layers or Frames

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks...

CVE-2007-6265: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in avast! 4 Home and Professional Editions before 4.7.1098 allows remote attackers to have an unknown impact via a crafted TAR archive...

CVE-2007-1256: Improper Restriction of Operations within the Bounds of a Memory Buffer

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092...

CVE-2006-3074: Improper Restriction of Operations within the Bounds of a Memory Buffer

klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus KAV 6.0 and 7.0, KAV 6.0 for Windows Workstations, and KAV 6.0 for Windows Servers does not validate certain parameters to the 1 NtCreateKey, 2 NtCreateProcess, 3 NtCreateProcessEx, 4 NtCreateSection, 5...