Security Advisory - Multiple Vulnerabilities of PEM Module in Some Huawei Products

There is a null pointer reference vulnerability in PEM module of Huawei products due to insufficient verification. An authenticated local attacker calls PEM decoder with special parameter, which could cause a denial of service. Vulnerability ID: HWPSIRT-2017-06047 This vulnerability has been...

Linux Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-34131)

The Linux Kernel is the kernel of the Linux operating system. Linux kernel has a local elevation of privilege vulnerability in the legousbtower driver. An attacker can exploit the vulnerability to cause a null pointer indirect reference with elevation of privilege...

Adobe Acrobat/Reader Untrustworthy Pointer Reference Vulnerability (CNVD-2017-36610)

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files have untrustworthy pointer references vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducin...

Adobe Acrobat/Reader Untrustworthy Pointer Reference Vulnerability

Adobe Acrobat and Reader is the United States of America Odooby publicly issued PDF file processing program. Adobe Acrobat and Reader processing PDF files have untrustworthy pointer references vulnerability, allowing remote attackers can exploit the vulnerability to submit a special file, inducin...

chromium-browser null pointer reference vulnerability

chromium-browser is an open source web browser project started by Google to provide source code for the proprietary Google Chrome browser. A null pointer reference vulnerability exists in the chromium-browser image capture widget. An attacker could exploit the vulnerability to cause a denial of...

Advantech WebAccess Pointer Reference Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A pointer reference vulnerability exists in versions prior...

SQLite Null Pointer Reference Vulnerability

SQLite is a self-contained, serverless, zero-configuration, transactional SQL database engine. A null pointer reference issue exists in tableColumnList in shell.c in SQLite, which can be exploited by an attacker to cause a denial of service...

WPS Presentation suffers from a null pointer reference vulnerability (CNVD-2017-30619)

WPS Office is an office software suite developed independently by Kingsoft Corporation. WPS Presentation wpp.exe in WPS has a null pointer reference vulnerability when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service...

Ffmpeg Null Pointer Reference Remote Denial of Service Vulnerability

FFmpeg is a free program that performs recording, transferring and streaming of audio and video in various formats. FFmpeg suffers from a null pointer reference remote denial of service vulnerability that could be exploited by an attacker to submit a special file that could be parsed by the user,...

Trend Micro Internet Security Denial of Service Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A denial of service vulnerability exists in Trend Micro Internet Security. The vulnerability stems from a pointer referen...

Oniguruma Denial of Service Vulnerability

mbstring Multi-Byte String is a language encoding extension library in PHP PHP: Hypertext Preprocessor; Oniguruma-mod is a regular expression library in Ruby programming language.Oniguruma is one of the a regular expression engine. A security vulnerability exists in Ruby's Oniguruma-mod and PHP's...

Linux kernel msm_ipc_router_close function denial of service vulnerability

The Linux Kernel is the kernel of the Linux operating system. A denial of service vulnerability exists in the Linux kernel msmipcrouterclose function, which can be exploited by an attacker to cause a denial of service null pointer indirect reference...

Artifex MuPDF Null Pointer Reference Denial of Service Vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A denial of service vulnerability exists in Artifex MuPDF. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service...

NVIDIA Windows GPU Display Driver Null Pointer Reference Denial of Service Vulnerability (CNVD-2017-01867)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A null pointer reference denial of service vulnerability exists in NVIDIA GPU Display Driver. An attacker could use this vulnerability to cause a denial of service or gain elevated...

Mp3splt 'cue.c' Null Pointer Reference Denial of Service Vulnerability

Mp3splt is an mp3 music cutter. A denial of service vulnerability exists in the cue.c file in Mp3splt version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service application crash...

PHP 'ext/wddx/wddx.c' Null Pointer Reference Remote Denial of Service Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A nu...

Google Chrome Denial of Service Vulnerability (CNVD-2016-08230)

Google Chrome is a web browser developed by the American company Google Google. A denial of service vulnerability exists in Google Chrome versions prior to 53.0.2785.113. A remote attacker can exploit this vulnerability by accessing the renderer process to cause a denial of service invalid pointe...

Microsoft Office PowerPoint 2010 - Invalid Pointer Reference

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=866 The following crash was observed in Microsoft PowerPoint 2010 running under Windows 7 x86 with application verifier enabled. File versions are: mso.dll: 14.0.7166.5000...

Microsoft Office PowerPoint 2010 - Invalid Pointer Reference

Microsoft Office PowerPoint 2010 - Invalid Pointer Reference Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=866 The following crash was observed in Microsoft PowerPoint 2010 running under Windows 7 x86 with application verifier enabled. File versions are: mso.dll: 14.0.7166.500...

Microsoft Office Null Pointer Reference Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A null pointer reference vulnerability exists in Microsoft Office, which causes the program to crash by constructing an office control and a null pointer call occurs when office executes a...