Scientific Linux Security Update : poppler on SL5.x i386/x86_64

An uninitialized pointer use flaw was discovered in poppler. An attacker could create a malicious PDF file that, when opened, would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code. CVE-2010-3702 An array index error was found in the way poppler...

krb5 security update

CentOS Errata and Security Advisory CESA-2012:1131 Updated krb5 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base score...

Important: Red Hat Security Advisory: icedtea-web security update

Updated icedtea-web packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

icedtea-web: getvalueforurl uninitialized instance pointer

The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instancetoidmap hash is empty, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted web page, which causes an...

krb5: KDC daemon crash via free() of an uninitialized pointer

The kdchandleprotectednegotiation function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute...

krb5 security update

1.9-33.2 - pull up the patch to correct a possible NULL pointer dereference in kadmind CVE-2012-1013, 827517 1.9-33.1 - add candidate patch from upstream to fix freeing uninitialized pointer in the KDC MITKRB5-SA-2012-001, CVE-2012-1015, 839859...

AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of America Online's Toolbar, Desktop, IM, and winamp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

Wireshark Denial of Service Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Quest InTrust - Annotation Objects Uninitialized Pointer (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Quest InTrust...

RHEL 5 / 6 : freetype (RHSA-2012:0467)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0467 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual...

freetype: uninitialized pointer use in BDF parser _bdf_parse_glyphs() (#35641)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODI...

Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution

Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution homepage: http://www.quest.com/intrust/ description: "InTrust securely collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems, helping you comply...

Quest InTrust 10.4.x - Annotation Objects ActiveX Control 'AnnotateX.dll' Uninitialized Pointer Remote Code Execution

Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution homepage: http://www.quest.com/intrust/ description: "InTrust securely collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems, helping you comply...

Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll

Exploit for windows platform in category remote exploits Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution homepage: http://www.quest.com/intrust/ description: "InTrust securely collects, stores, reports and alerts on event log data...

Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer

Luigi Auriemma Application: Microsys PROMOTIC http://www.promotic.eu/en/promotic/scada-pm.htm Versions: 8.1.4 Platforms: Windows Bug: ActiveX GetPromoticSite unitialized pointer Exploitation: remote Date: 30 Oct 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introducti...

Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer

Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer Luigi Auriemma Application: Microsys PROMOTIC http://www.promotic.eu/en/promotic/scada-pm.htm Versions: 8.1.4 Platforms: Windows Bug: ActiveX GetPromoticSite unitialized pointer Exploitation: remote Date: 30 Oct 2011 Author:...

Microsoft Host Integration Server DoS

Uninitialized pointer dereference, endless loop...

Microsoft Office "MSO.dll"未初始化指针远程代码执行漏洞（MS11-073）

BUGTRAQ ID: 49513 CVECAN ID: CVE-2011-1982 Microsoft Office是一套由微软公司开发的办公软件，它为Microsoft Windows和Apple Macintosh操作系统而开发。 Microsoft Office实现上存在"MSO.dll"处理未初始化指针漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码，可能造成拒绝服务。 Microsoft Office 2010 Microsoft Office 2007 厂商补丁： Microsoft ---------...

Microsoft Office Uninitialized Object Pointer (MS11-073; CVE-2011-1982)

A remote code execution vulnerability has been reported in Microsoft Office. A remote attacker could exploit this vulnerability to execute arbitrary code in an affected system. The vulnerability is caused due to an uninitialized pointer used by Microsoft Office while handling Word documents. A...

CentOS Update for kdegraphics CESA-2010:0753 centos5 i386

Check for the Version of kdegraphics OpenVAS Vulnerability Test CentOS Update for kdegraphics CESA-2010:0753 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...