CVE-2012-3548: Undefined Security Weakness

The dissectdrda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a small value for a certain length field in a capture file...

CVE-2012-3418

libpcp in Performance Co-Pilot PCP before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a PDU with the numcreds field value greater than the number of actual elements to the pmDecodeCreds function in pcreds.c; 2 the string byte number value t...

CVE-2012-1176

Buffer overflow in the fribidiutf8tounicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service application crash via a 4-byte utf-8 sequence...

CVE-2012-3518

The networkstatusparsevotefromstring function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted 1 vote document or 2 consensus document...

CVE-2009-5129: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service intermittent LDAP authentication outage via a login attempt with an incorrect password...

CVE-2012-3402

Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted channels header value in a PSD image file, which triggers a heap-based buffer overflow, a...

PT-2012-4782

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.2.38 Description The issue is related to the networkstatus parse vote from string function in routerparse.c, which does not properly handle an invalid flavor name. This allows remote attackers to cause a denial of...

PT-2012-2265

Name of the Vulnerable Software and Affected Versions OpenTTD versions 0.3.5 through 1.1.4 Description The issue allows remote attackers to cause a denial of service, resulting in a game pause, by connecting to the server and not completing either the authorization phase or the map download, whic...

CVE-2011-4352: Undefined Security Weakness

Integer overflow in the vp3dequant function in the VP3 decoder vp3.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of...

CVE-2012-4296

Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service CPU consumption via a malformed packet...

CVE-2012-4295

Array index error in the channelisedfillsdhg707format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service application crash via a crafted speed aka rate value...

CVE-2012-4295: Improper Input Validation

Array index error in the channelisedfillsdhg707format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service application crash via a crafted speed aka rate value...

CVE-2012-2806: Out-of-bounds Write

Heap-based buffer overflow in the getsos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large component count in the header of a JPEG image...

CVE-2012-2858

Buffer overflow in the WebP decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted WebP image...

CVE-2012-2849

Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service out-of-bounds read via a crafted image...

PT-2012-1039

Name of the Vulnerable Software and Affected Versions NSD versions 3.0.x through 3.0.8 NSD versions 3.1.x through 3.1.1 NSD versions 3.2.x before 3.2.12 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and child process crash, via...

CVE-2012-3954

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service memory consumption by sending many requests...

PT-2012-4691

Name of the Vulnerable Software and Affected Versions Moodle versions 1.9.x through 1.9.18 Moodle versions 2.0.x through 2.0.9 Moodle versions 2.1.x through 2.1.6 Moodle versions 2.2.x through 2.2.3 Description The issue allows remote authenticated users to cause a denial of service by consuming...

CVE-2011-2199

Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option...

PT-2012-1544

Name of the Vulnerable Software and Affected Versions tftp-hpa versions prior to 5.1 Description A buffer overflow issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option. Recommendations For versions prior to 5.1, update to version 5...