RHEL 6 : firefox (RHSA-2013:1476)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1476 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found ...

Mozilla nss uninitialized memory dereference

Uninitialized memory dereference on decryption...

Apple iTunes < 11.1.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 11.1.2. It is, therefore, potentially affected by several issues : - An uninitialized memory access issue exists in the handling of text tracks, which could lead to memory corruption and possibly arbitrary code...

Sql injection

A SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3.x before 6.3.0.56, 6.5.x before 6.5.0.12, and 7.0.x before 7.0.0.4 allows remote authenticated users to cause a denial of service uninitialized-memory access and daemon crash via a call that includes...

CVE-2013-3031: Improper Restriction of Operations within the Bounds of a Memory Buffer

A SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3.x before 6.3.0.56, 6.5.x before 6.5.0.12, and 7.0.x before 7.0.0.4 allows remote authenticated users to cause a denial of service uninitialized-memory access and daemon crash via a call that includes...

Amazon Linux AMI : php (ALAS-2012-41)

It was discovered that the fix for CVE-2011-4885 introduced an uninitialized memory use flaw. A remote attacker could send a specially crafted HTTP request to cause the PHP interpreter to crash or, possibly, execute arbitrary code. C Tenable Network Security, Inc. The descriptive text and package...

Kernel: Bluetooth: RFCOMM - information leak

The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application...

libcurl uninitialized memory reference

Uninitialized memory access in curleasyunescape...

PT-2013-4835

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.7 Description The issue is related to the GMR-1 BCCH dissector in Wireshark, where memory is not properly initialized. This allows remote attackers to cause a denial of service, resulting in an application...

Uninitialized functions in DOMSVGZoomEvent — Mozilla

Mozilla community member Ms2ger discovered that some DOMSVGZoomEvent functions are used without being properly initialized, causing uninitialized memory to be used when they are called by web content. This could lead to a information leakage to sites depending on the contents of this uninitialize...

CVE-2013-1232

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...

Design/Logic Flaw

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...

CVE-2013-1232

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...

PT-2013-2995

Name of the Vulnerable Software and Affected Versions Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series affected versions not specified Description The issue allows remote attackers to read the contents of uninitialized memory locations via a crafted request...

CVE-2013-1232: Improper Input Validation

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...

Mandriva Linux Security Advisory : poppler (MDVSA-2013:143)

Multiple vulnerabilities has been found and corrected in poppler : poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an invalid memory access in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3...

DEBIAN-CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

CVE-2013-1790

poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...

CVE-2013-1790

CVE-2013-1790 affects poppler’s CCITTFaxStream implementation: poppler/Stream.cc before 0.22.1 may read uninitialized memory via CCITTFaxStream::lookChar, leading to an unspecified impact. The vulnerability is tied to reading uninitialized memory and is documented with a CVSS base of 6.8 (MEDIUM)...