DEBIAN-CVE-2012-2320

ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message...

CVE-2012-0651: Exposure of Sensitive Information to an Unauthorized Actor

The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a crafted message...

CVE-2011-4620

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these...

Design/Logic Flaw

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

CVE-2011-4601

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

Design/Logic Flaw

The silcchannelmessage function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted message, a different vulnerability...

CVE-2011-4602: Improper Input Validation

The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in 1 voice-chat and 2 video-chat stanzas, which allows remote attackers to cause a denial of service application crash via a crafted message...

CVE-2011-4603

The silcchannelmessage function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted message, a different vulnerability...

pidgin: Multiple NULL pointer deference flaws by processing certain Jingle stanzas in the XMPP protocol plug-in

The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in 1 voice-chat and 2 video-chat stanzas, which allows remote attackers to cause a denial of service application crash via a crafted message...

PT-2011-5007

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.1 Description The issue arises from the XMPP protocol plugin in libpurple not properly handling missing fields in voice-chat and video-chat stanzas. This allows remote attackers to cause a denial of service,...

PT-2011-5008

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.1 Description The issue concerns a problem with UTF-8 validation on message data in the SILC protocol plugin. This allows remote attackers to cause an application crash via a crafted message. Recommendations For...

SuSE 10 Security Update : dbus (ZYPP Patch Number 7482)

Local users could crash the D-Bus daemon by sending a specially crafted message CVE-2010-4352. This update also properly fixes CVE-2008-3834 / CVE-2009-1189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'...

HP Intelligent Management Center iNodeMngChecker.exe Buffer Overflow (CVE-2011-1867)

A remote code execution vulnerability has been reported in the HP Intelligent Management Center User Access Manager UAM and Endpoint Admission Defense EAD. The vulnerability is due to insufficient user input data validation by the application. A remote attacker could exploit this vulnerability by...

CVE-2011-2735

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.1 allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by sending a crafted message over TCP...

Siemens Tecnomatix FactoryLink SCADA Multiple Services Denial Of Service

Multiple Denial of Service DoS vulnerabilities have been reported in Siemens' Tecnomatix FactoryLink SCADA system. The vulnerabilities are due to insufficient verification of messages' data by the Siemens Tecnomatix FactoryLink's services, while handling messages sent to the server. Remote...

CVE-2011-1741

Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other products, allows remote attackers to execute arbitrary code by sending a crafted message over TCP...

CVE-2011-2074

Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via a crafted message...

Design/Logic Flaw

Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via a crafted message...

CVE-2011-2074

Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via a crafted message...

PT-2011-3570

Name of the Vulnerable Software and Affected Versions Skype versions prior to 5.1.0.922 Description The issue allows remote authenticated users to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted message. Recommendations For versions prior to...