CVE-2006-3356: Undefined Security Weakness

The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service application crash via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469...

CVE-2006-3354: Undefined Security Weakness

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service crash by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which triggers a null dereference...

Apple Safari Web Browser 2.0.4 - DHTML SetAttributeNode() Null Dereference Denial of Service

Apple Safari Web Browser 2.0.4 - DHTML SetAttributeNode Null Dereference Denial of Service source: https://www.securityfocus.com/bid/18822/info Apple Safari web browser is prone to a denial-of-service vulnerability when parsing certain malformed DHTML elements. An attacker can exploit this issue ...

Apple Safari Web Browser 2.0.4 - DHTML SetAttributeNode() Null Dereference Denial of Service

source: https://www.securityfocus.com/bid/18822/info Apple Safari web browser is prone to a denial-of-service vulnerability when parsing certain malformed DHTML elements. An attacker can exploit this issue to crash an affected browser. // MoBB Demonstration function Demo var a =...

Mandrake Linux Security Advisory : freetype2 (MDKSA-2006:099-1)

Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service crash via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values. CVE-2006-0747 Multiple integer overflows in...

Microsoft RRAS InterfaceAdjustVLSPointers NULL Dereference

This module triggers a NULL dereference in svchost.exe on all current versions of Windows that run the RRAS service. This service is only accessible without authentication on Windows XP SP1 using the SRVSVC pipe. Module Options msf use auxiliary/dos/windows/smb/rras/vlsnullderef msf...

Design/Logic Flaw

ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service crash via a crafted font file that triggers a null dereference...

DEBIAN-CVE-2006-2661

ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service crash via a crafted font file that triggers a null dereference...

CVE-2006-2661

ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service crash via a crafted font file that triggers a null dereference...

CVE-2006-2661

ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service crash via a crafted font file that triggers a null dereference...

CVE-2006-2661

ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service crash via a crafted font file that triggers a null dereference...

security flaw

iprouteinput in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service panic via a request for a route for a multicast IP address, which triggers a null dereference...

Design/Logic Flaw

The parsecommand function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service crash via a command with a missing ":" colon separator, which triggers a null dereference...

CVE-2006-2555

The CVE-2006-2555 issue affects Genecys 0.2 and earlier. The parse_command function can trigger a null dereference and remote denial of service when a command is sent without a ":" separator. The available sources describe the vulnerability and impact (crash) but do not provide exploitation code ...

CVE-2006-2555

The parsecommand function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service crash via a command with a missing ":" colon separator, which triggers a null dereference...

CVE-2006-2555: Undefined Security Weakness

The parsecommand function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service crash via a command with a missing ":" colon separator, which triggers a null dereference...

CVE-2006-2538

IE Tab 1.0.9 plugin for Mozilla Firefox 1.5.0.3 allows remote user-assisted attackers to cause a denial of service application crash, possibly due to a null dereference, via certain Javascript, as demonstrated using a url parameter to the content/reloaded.html page in a chrome:// URI. Some...

CVE-2006-2538: Undefined Security Weakness

IE Tab 1.0.9 plugin for Mozilla Firefox 1.5.0.3 allows remote user-assisted attackers to cause a denial of service application crash, possibly due to a null dereference, via certain Javascript, as demonstrated using a url parameter to the content/reloaded.html page in a chrome:// URI. Some...

Design/Logic Flaw

raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...

CVE-2006-2410

raydiumnetworknetcallexec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a packet of type 0xFF, which causes a null dereference...