GnuTLS < 2.2.4 vulnerability (Windows)

The remote host is probably affected by the vulnerabilities described in CVE-2008-1948, CVE-2008-1949, CVE-2008-1950 GnuTLS 2.2.4 vulnerability Impact CVE-2008-1948 The gnutlsservernamerecvparams function in lib/extservername.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly...

Design/Logic Flaw

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

CVE-2008-2706

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

CVE-2008-2706

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

CVE-2008-2706: Undefined Security Weakness

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

CVE-2008-1949: Improper Authentication

The gnutlsrecvclientkxmessage function in lib/gnutlskx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service NULL dereference and crash v...

GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference

The gnutlsrecvclientkxmessage function in lib/gnutlskx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service NULL dereference and crash v...

Single MySQL worker can be crashed (NULL deref) with certain SELECT statements

MySQL 5.x before 5.0.36 allows local users to cause a denial of service database crash by performing informationschema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort...

krb5: uninitialized pointer use in krb5kdc

KDC in MIT Kerberos 5 krb5kdc does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free...

NULL dereference in iwl driver

The iwlsetrate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwlgethwmode return value without checking for NULL, which might allow remote attackers to cause a denial of service kernel panic via unspecified vectors during module initialization...

CVE-2008-1062: Improper Input Validation

InterVideo IMC Server aka IMCSvr.exe and InterVideo Home Theater aka IHT.exe in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service NULL dereference and application crash via a crafted packet with two CRLF sequences. NOTE: the provenance of this informatio...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

CVE-2008-0944: Undefined Security Weakness

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

Out-of-bounds

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

DEBIAN-CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672: Improper Input Validation

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...