PHP 'ext/wddx/wddx.c' Null Pointer Reference Remote Denial of Service Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A nu...

Google Chrome Denial of Service Vulnerability (CNVD-2016-08230)

Google Chrome is a web browser developed by the American company Google Google. A denial of service vulnerability exists in Google Chrome versions prior to 53.0.2785.113. A remote attacker can exploit this vulnerability by accessing the renderer process to cause a denial of service invalid pointe...

Microsoft Office PowerPoint 2010 - Invalid Pointer Reference

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=866 The following crash was observed in Microsoft PowerPoint 2010 running under Windows 7 x86 with application verifier enabled. File versions are: mso.dll: 14.0.7166.5000...

Microsoft Office PowerPoint 2010 - Invalid Pointer Reference

Microsoft Office PowerPoint 2010 - Invalid Pointer Reference Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=866 The following crash was observed in Microsoft PowerPoint 2010 running under Windows 7 x86 with application verifier enabled. File versions are: mso.dll: 14.0.7166.500...

Microsoft Office Null Pointer Reference Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A null pointer reference vulnerability exists in Microsoft Office, which causes the program to crash by constructing an office control and a null pointer call occurs when office executes a...

Pidgin MXIT Protocol Denial of Service Vulnerability (CNVD-2016-04334)

Pidgin is a cross-platform real-time communication client. A denial of service vulnerability exists in the MXIT protocol processing of Pidgin version 2.10.11, which can be exploited by an attacker to cause a denial of service null pointer reverse reference by sending invalid data...

Apple OS X Intel Graphics Driver Null Pointer Reference Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles a null pointer reference vulnerability in Intel Graphics Driver, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X IOThunderboltFamily Null Pointer Reference Denial of Service Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles the IOThunderboltFamily with a null pointer reference vulnerability that allows attackers to conduct denial-of-service attacks by exploiting the vulnerability...

Apple OS X OKit Null Pointer Reference Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OKit with a null pointer reference vulnerability that allows an attacker to execute arbitrary code with system privileges...

Adobe Flash Player and AIR Null Pointer Reference Denial of Service Vulnerability (CNVD-2015-04554)

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR are implemented with a nu...

Microsoft Windows Kernel 'Win32k.sys' Null Pointer Reference Vulnerability

Microsoft Windows is a popular operating system. A null pointer reference vulnerability in Microsoft Windows Kernel 'Win32k.sys' allows local attackers to exploit the vulnerability to execute arbitrary code with elevated privileges...

IPsec-Tools Null Pointer Reference Denial of Service Vulnerability

IPsec-Tools is a user-space implementation of different IPSecs ported from KAME's libipsec, setkey and racoon, and supports various BSD systems. A null pointer reference vulnerability exists in IPsec-Tools, which allows remote attackers to crash an application by submitting a special request...

Apache HTTP Server 'protocol.c' Remote Denial of Service Vulnerability

Apache HTTP Server is an open source web server from the Apache Software Foundation. Apache HTTP Server 2.2.29/2.4.12 suffers from a null pointer indirect reference vulnerability in the implementation. An attacker is allowed to exploit this vulnerability to crash the application, resulting in a...

Apple Mac OS X NVIDIA Graphics Driver Null Pointer Reference Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X NVIDIA Graphics Driver Handling A null pointer reference vulnerability exists in certain IOService user client types, which could allow a local user to gain privileges or cause a denial of service null pointer...

MIT Kerberos ASN.1 asn1_decode_generaltime Uninitialized Pointer Reference - Ver2 (CVE-2009-0846)

MIT Kerberos V5 is an implementation of the Kerberos protocol that allows for the negotiation of an authenticated, and optionally encrypted, communication channel between two points on a network. The MIT Kerberos V5 server utilizes the encrypted SUN-RPC protocol to communicate with its remote...

CVE-2013-2130: Undefined Security Weakness

ZNC 1.0 allows remote authenticated users to cause a denial of service NULL pointer reference and crash via a crafted request to the 1 editnetwork, 2 editchan, 3 addchan, or 4 delchan page in modules/webadmin.cpp...

Updated openssl package fixes security vulnerability

A flaw was reported for OpenSSL 1.0.1e, that can cause application using OpenSSL to crash when using TLS version 1.2 CVE-2013-6449. Also, a NULL pointer reference issue has been fixed in SSLgetcertificate mga11549...

MGASA-2014-0008 Updated openssl package fixes security vulnerability

A flaw was reported for OpenSSL 1.0.1e, that can cause application using OpenSSL to crash when using TLS version 1.2 CVE-2013-6449. Also, a NULL pointer reference issue has been fixed in SSLgetcertificate mga11549...

Firefly Media Server firefly.exe畸形HTTP请求远程拒绝服务漏洞

BUGTRAQ ID: 56999 CVECAN ID: CVE-2012-5875 Firefly Media Server是开源的音频媒体服务器。 Firefly Media Server 1.0.0.1359及其他版本存在多个空指针引用漏洞，恶意用户可利用这些漏洞造成远程服务器崩溃。 1）"firefly.exe"文件内的HTTP CONNECTION标头没有正确处理，通过发送特制的报文到9999/TCP端口，可导致空指针引用，造成受影响服务器立即崩溃。 崩溃细节： EIP: 0041e223 cmp byte ecx,0x20 EAX: 0175eee8 24506088 -...

DOS and crash with full screen and history navigation — Mozilla

Security researcher Soroush Dalili reported that a combination of invoking full screen mode and navigating backwards in history could, in some circumstances, cause a hang or crash due to a timing dependent use-after-free pointer reference. This crash may be potentially exploitable...