PT-2013-2089

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 SP1 Microsoft SharePoint Foundation 2010 SP1 Description A buffer overflow issue allows remote attackers to cause a denial of service by crashing the W3WP process and causing a site outage via a crafted URL. Th...

[security bulletin] HPSBMU02849 SSRT101124 rev.1 - HP ServiceCenter, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03680085 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03680085 Version: 1 HPSBMU02849...

CVE-2013-0903

Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of browser navigation...

CVE-2013-0184

Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to "symbolized arbitrary strings."...

CVE-2013-1137: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Unified Presence Server CUPS 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service CPU consumption via crafted packets to the SIP TCP port, aka Bug ID CSCua89930...

PT-2013-2676

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 25.0.1364.97 on Windows and Linux Google Chrome versions prior to 25.0.1364.99 on Mac OS X Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecifi...

PT-2013-2610

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 19.0 Firefox ESR versions 17.x prior to 17.0.3 Thunderbird versions prior to 17.0.3 Thunderbird ESR versions 17.x prior to 17.0.3 SeaMonkey versions prior to 2.16 Description The issue allows remote attackers ...

CVE-2013-1131: Undefined Security Weakness

Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SSID that is not properly handled during a site survey, aka Bug IDs CSCua86182, CSCua91196, CSCud36155, and...

CVE-2013-1621: Improper Input Validation

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169...

PT-2013-3449

Name of the Vulnerable Software and Affected Versions Subversion versions 1.7.0 through 1.7.8 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash of the Apache HTTPD server module. This is achieved by sending a log REPORT request...

PT-2013-3269

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue is related to a buffer overflow in the NTLMSSP dissector, allowing remote attackers to cause a denial of service by crashing the application v...

CVE-2013-0841

Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

PT-2013-2646

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 24.0.1312.56 Description The issue is related to an array index error in the content-blocking functionality. This could allow remote attackers to cause a denial of service or possibly have other unspecified...

CVE-2013-0189

cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service resource consumption via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorrect order of arguments or...

CVE-2013-0832

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing...

CVE-2012-5147

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling...

CVE-2012-5145

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout...

CVE-2012-5149

Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2012-5150

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving seek operations on video data...

PT-2013-1757

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 24.0.1312.52 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors involving PDF fields. Recommendations For versions prio...