X (Formerly Twitter): Full Path Disclosure at 27.prd.vine.co

27.prd.vine.co had DNS pointing to an EC2 instance which had a path disclosure. The EC2 instance was previously owned by Vine but had been deallocated and later re-allocated to a new Amazon customer...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the browser/ui/views/speechrecognitionbubbleviews.cc file. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other adverse effects through...

The vulnerability of the Internet Explorer browser, which allows a malicious individual to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to memory usage after deallocation of objects of the ClayoutBlock class. Exploiting this vulnerability allows malicious actors, operating remotely, to execute arbitrary code or cause service failures due to insufficient validation of...

UBUNTU-CVE-2015-0808

The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service memory corruption via unspecified vectors...

Microsoft Browser Embedded Media Player Memory Corruption (MS10-082) - Ver2 (CVE-2010-2745)

Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in Windows Media Player. The vulnerability is due to an error in the Windows Media Player that improperly...

CVE-2014-0701

Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...

CVE-2014-0701

Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...

CVE-2014-0701: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...

Scientific Linux Security Update : rsync on SL5.x i386/x86_64

This updated rsync package fixes the following bug : - The previous rsync security errata update, which was applied with the rsync tool update to version 3.0.6-4, introduced a patch which fixed the issue with missing memory deallocation. Due to an error in that patch, the following new issue...

Debian DSA-2381-1 : squid3 - invalid memory deallocation

It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. The squid package and the version of Squid 3 shipped in lenny lack IPv6 support and are not affected by this issue. %NASLMINLEV...

[SECURITY] [DSA 2381-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2381-1 [email protected] http://www.debian.org/security/ Florian Weimer January 06, 2012 http://www.debian.org/security/faq -...

DSA-2381-1 squid3 - invalid memory deallocation

Bulletin has no description...

Moderate: Red Hat Security Advisory: rsync security, bug fix, and enhancement update

An updated rsync package that fixes one security issue, several bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

CVE-2011-0637: Undefined Security Weakness

The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer, which might allow attackers to cause a denial of service system crash via unspecified vectors...

MDVA-2008:171 : gdm

An incorrect memory deallocation was causing a crash when the GNOME display manager was exiting. This package update fixes this issue and includes additional bug fixes and translation updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currentl...

Mandriva Update for gdm MDVA-2008:171 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2008:171 gdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for gdm MDVA-2008:171 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2008:171 gdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

GLSA-200502-24 : Midnight Commander: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200502-24 Midnight Commander: Multiple vulnerabilities Midnight Commander contains several format string vulnerabilities CAN-2004-1004, buffer overflows CAN-2004-1005, a memory deallocation error CAN-2004-1092 and a buffer underfl...

Midnight Commander: Multiple vulnerabilities

Background Midnight Commander is a visual console file manager. Description Midnight Commander contains several format string vulnerabilities CAN-2004-1004, buffer overflows CAN-2004-1005, a memory deallocation error CAN-2004-1092 and a buffer underflow CAN-2004-1176. Impact An attacker could...

MIT Kerberos 5 ASN.1 decoding functions insecurely deallocate memory (double-free)

Overview The MIT Kerberos 5 library does not securely deallocate heap memory when decoding ASN.1 structures, resulting in double-free vulnerabilities. An unauthenticated, remote attacker could execute arbitrary code on a KDC server, which could compromise an entire Kerberos realm. An attacker may...