Mozilla Firefox JIT escape Function Memory Corruption - Ver2 (CVE-2009-2477)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, and various graphic formats, and so on. The browser runs on Windows,...

Trimble Navigation SketchUp BMP File Code Execution - Ver2 (CVE-2013-3663)

A remote code execution vulnerability exists in Trimble Navigation's SketchUp. The vulnerability is due to a heap buffer overflow while processing BMP files which contain malicious RLE data. Remote unauthenticated attackers can exploit this vulnerability by enticing a target user to open a...

Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs ...

BigAnt Server SCH Request Stack Buffer Overflow (CVE-2012-6275)

A stack buffer overflow vulnerability exists in BigAnt Server. The vulnerability is due to a boundary error when handling SCH and DUPF requests. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server. Successful exploitation would result...

Cisco Wireless LAN Controller Software Form Post Denial of Service Vulnerability

Cisco Wireless LAN Controller Software contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient validation of user-supplied input to the affected software. An authenticated, remote attacker cou...

CVE-2012-0290

Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, Altiris Client Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 aka 12.5.x and 12.6.x do not...

Microsoft Office Visio UMLString Code Execution (MS11-060; CVE-2011-1971)

A remote code execution vulnerability has been reported in Microsoft Visio. The vulnerability is due to insufficient validation by Microsoft Visio when processing UMLString data in Visio files. A remote attacker could exploit this issue by enticing an unsuspecting user to download and open a...

Apple Safari WebKit Range Object Remote Code Execution (CVE-2011-0115)

A Remote attacker can exploit this vulnerability by enticing an unsuspecting target user to open a maliciously crafted web page. Successful exploitation of this vulnerability may enable an attacker to execute code in an affected system in the security context of the logged in user. A remote code...

Apple Safari WebKit Menu Onchange Memory Corruption (CVE-2010-1814)

Safari is a web browsing application developed by Apple. Safari browsing functionality is built around the set of components called WebKit. WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP, and others. A...

iSCSI target Multiple Implementations Format String Code Execution (CVE-2010-0743)

iSCSI Internet Small Computer System Interface is an Internet Protocol based storage networking standard for linking data storage facilities. It is used to transfer data over the network using the SCSI protocol. A format string vulnerability has been reported in multiple implementations of iSCSI...

RealNetworks RealPlayer Buffer Overflow (CVE-2004-0258)

RealPlayer is a media player produced by RealNetworks, Inc. that supports a variety of open and proprietary multimedia stream and file formats. Versions of RealPlayer are available for most common platforms such as Windows, Linux, Solaris, etc. There exists a buffer overflow vulnerability in...

Apple QuickTime Streaming Debug Error Logging Buffer Overflow (CVE-2010-1799)

QuickTime is a media player application developed by Apple. It is capable of playing back numerous multimedia file formats from local file system or network servers. One of the media formats supported by Apple QuickTime is SMIL. A stack buffer overflow vulnerability exists in Apple QuickTime medi...

Sun Java Runtime Environment JPEGImageReader Heap Overflow

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...

Mozilla Firefox JavaScript Array.splice Memory Corruption (CVE-2009-0773)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

GStreamer QuickTime File Parsing Multiple Heap Overflows (CVE-2009-0398)

GStreamer is a pipeline based multimedia framework written in the C programming language. GStreamer allows a programmer to create a variety of media-handling components, including simple audio playback, audio and video playback, recording, streaming, and editing. The pipeline design serves as a...

Sun Java Runtime Environment Abstract Windowing Toolkit Memory Corruption (CVE-2008-5359)

There exists a buffer overflow vulnerability in Sun Java Runtime Environment JRE. The vulnerability is caused due to improper checking of parameters passed to natively implemented class methods. A remote attacker may leverage this vulnerability to inject and execute arbitrary code on the target...

Openwsman HTTP Basic Authentication Buffer Overflow (CVE-2008-2234)

Openwsman is an implementation of Web Services Management WS-Management specification. It uses the WS-Management protocol, which is a SOAP-based protocol using HTTP for exchange of information related to management of devices and applications in a platform independent manner. There exists a stack...

Apple CUPS SGI Image Format Decoding imagetops Filter Buffer Overflow (CVE-2008-3639)

The Common Unix Printing System CUPS is a modular printing system for Unix-like operating systems that allows a computer to act as a print server. A computer running CUPS is a host that can accept print jobs from client computers, process them, and send them to the appropriate printer. There exis...

Microsoft Windows DNS Client Buffer Overrun (CVE-2006-3441)

There exists a buffer overflow vulnerability in the DNS client component of Microsoft Windows. The flaw is caused by the improper processing of crafted DNS messages. A remote attacker may leverage this vulnerability by sending crafted DNS responses to the affected service, resulting in the possib...

Apple iTunes PLS File Parsing Buffer Overflow (CVE-2009-2817)

Apple iTunes is a multimedia player that supports a wide range of media formats. One of the file formats supported by Apple iTunes is the PLS file format. PLS is a computer file format that stores multimedia playlists. A buffer overflow vulnerability has been reported in Apple iTunes. The error i...