lost fput in a 32-bit ioctl on 64-bit x86 systems

The Linux kernel before 2.6.9-42.0.8 in Red Hat 4.4 allows local users to cause a denial of service kernel OOPS from null dereference via fput in a 32-bit ioctl on 64-bit x86 systems, an incomplete fix of CVE-2005-3044.1...

NFS lockd deadlock

The nlmclntmarkreclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service process crash and deny access to NFS exports via unspecified vectors that trigger a kernel oops null dereference and a deadlock...

CVE-2005-4840

The CVE-2005-4840 issue affects the Outlook Express Address Book control when used with Internet Explorer 6. The vulnerability arises from exploiting the OutlookExpress.AddressBook COM object in IE, leading to a NULL dereference and a browser crash (denial of service). Connected advisories corrob...

CVE-2007-2603

Unspecified vulnerability in the Init function in the Audio CD Ripper OCX AudioCDRipperOCX.ocx 1.0 ActiveX control allows remote attackers to cause a denial of service NULL dereference and Internet Explorer crash via unspecified vectors...

CVE-2007-2605

Unspecified vulnerability in the GetPropertyById function in ISoftomateObj in SoftomateLib in BRUJULA4.NET.DLL in the Brujula Toolbar Brujula.net toolbar allows attackers to cause a denial of service NULL dereference and browser crash via certain arguments...

CVE-2007-2605

The CVE-2007-2605 issue affects Brujula Toolbar components: Brujula4.NET.DLL (SoftomateLib) with GetPropertyById in ISoftomateObj. The vulnerability is described as a denial of service caused by a NULL dereference when supplied with certain arguments. The provided documents identify the affected ...

CVE-2007-2605

Unspecified vulnerability in the GetPropertyById function in ISoftomateObj in SoftomateLib in BRUJULA4.NET.DLL in the Brujula Toolbar Brujula.net toolbar allows attackers to cause a denial of service NULL dereference and browser crash via certain arguments...

Oracle MySQL < 5.0.40 IF Query NULL Dereference DoS

Binary data 3985.prm...

security flaw

The ipv6getsockoptsticky function in net/ipv6/ipv6sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference...

Crlf injection

NMMediaServer.exe in Nero MediaHome 2.5.5.0 and CE 1.3.0.4 allows remote attackers to cause a denial of service NULL dereference and application crash via a crafted packet that contains two CRLF sequences. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2007-2213

Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WSFTP Home and Professional 2007 allows remote attackers to cause a denial of service NULL dereference and application crash via unspecified vectors related to "improper arguments."...

CVE-2007-2213

Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WSFTP Home and Professional 2007 allows remote attackers to cause a denial of service NULL dereference and application crash via unspecified vectors related to "improper arguments."...

security flaw

The key serial number collision avoidance code in the keyallocserial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cause a denial of service crash via vectors that trigger a null dereference, as originally reported as "spinlock CPU recursion."...

Design/Logic Flaw

The ipv6getsockoptsticky function in net/ipv6/ipv6sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference...

CVE-2007-1000

The ipv6getsockoptsticky function in net/ipv6/ipv6sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference...

Design/Logic Flaw

MySQL 5.x before 5.0.36 allows local users to cause a denial of service database crash by performing informationschema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort...

CVE-2007-1420

MySQL 5.x before 5.0.36 allows local users to cause a denial of service database crash by performing informationschema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort...

CVE-2007-1000

The CVE-2007-1000 issue affects the Linux kernel up to version 2.6.20.2, where the ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c can trigger a NULL dereference through certain getsockopt calls, allowing local users to read arbitrary kernel memory. The vulnerability stems from a NULL...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:060)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The 2.6.17 kernel and earlier, when running on IA64 and SPARC platforms would allow a local user to cause a DoS crash via a malformed ELF file CVE-2006-4538. The mincore function in the Linux kernel did not properly lock...

Design/Logic Flaw

The SILCSERVERCMDFUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service NULL dereference and daemon crash via a request without a cipher algorithm and an invalid HMAC algorithm...