5439 matches found
CVE-2010-0735
CVE-2010-0735 is a duplicate of CVE-2010-0969 (Rejected reason in the initial entry). Connected documents describe CVE-2010-0969 as a remote denial-of-service vulnerability in Unbound DNS resolver, caused by improper allocation of sock_list structures before version 1.4.3. Affected product: Unbound
Microsoft SMB NTLM Authentication Lack of Entropy (MS10-012; CVE-2010-0231)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. An elevation of privilege vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol software handles authentication attempts. The vulnerability is due to a lack of...
CVE-2009-4481
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-3111. Reason: This candidate is a duplicate of CVE-2009-3111. Notes: All CVE users should reference CVE-2009-3111 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2009-4481
CVE-2009-3111 (FreeRADIUS) is a remote denial-of-service vulnerability in the radiusd daemon caused by a flaw in rad_decode handling of Tunnel-Password attributes with zero length. The issue can crash radiusd via specially crafted RADIUS packets. Remediation observed in connected advisories inclu...
CVE-2009-3908
CVE-2009-3908 is a duplicate and explicitly rejected; not an active vulnerability entry.
CVE-2009-3907
CVE-2009-3907 is a duplicate of CVE-2009-3607. The underlying issue is in Poppler (0.x): integer overflow in create_surface_from_thumbnail_data (glib/poppler-page.cc) that can cause memory corruption, potentially leading to denial of service or remote code execution when processing crafted PDFs. ...
CVE-2009-4132
CVE-2009-4132 is rejected/not used; duplicate of CVE-2009-4214.
CVE-2009-4054
CVE-2009-3672 affects Microsoft Internet Explorer 6 and 7. The vulnerability stems from improper handling of memory objects by getElementsByTagName for the STYLE tag, leading to a memory corruption that enables remote code execution via mshtml.dll. The issue was originally tracked as CVE-2009-405...
Firefox 3.5.3 Remote Array Overrun (UPDATE)
Please update CVE-2009-1563 BID:36851 and BID:36843 Mozilla has changed credit. http://www.mozilla.org/security/announce/2009/mfsa2009-59.html and add correct CVE: CVE-2009-0689. CVE-2009-1563 shouldn't never exists. It is duplicate...
CVE-2008-4826
CVE-2008-4826 is rejected; duplicate of CVE-2009-3853 and not an active vulnerability entry.
CVE-2009-1563
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-0689. Reason: This candidate is a duplicate of CVE-2009-0689. Certain codebase relationships were not originally clear. Notes: All CVE users should reference CVE-2009-0689 instead of this candidate. All references and...
CVE-2009-1563
CVE-2009-0689 is the active vulnerability; CVE-2009-1563 is a duplicate. Connected advisories show this flaw affects multiple projects via a boundary/array-index condition in floating-point conversion code (e.g., Mono’s string-to-double parser) that may crash and, in some contexts, allow arbitrar...
CVE-2009-3454
CVE-2009-2510 describes a spoofing vulnerability in the Windows CryptoAPI where the Common Name (CN) field in X.509 certificates containing a NULL terminator is misparsed, allowing MITM-style impersonation if a malicious cert is issued by a trusted CA. The issue affects multiple Windows versions ...
CVE-2009-3239
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-2139, CVE-2009-2140. Reason: This candidate is a duplicate of CVE-2009-2139 and CVE-2009-2140. Notes: All CVE users should reference CVE-2009-2139 and CVE-2009-2140 instead of this candidate. All references and descriptions i...
CVE-2009-3239
CVE-2009-3239 is rejected/not used; refer to CVE-2009-2139 and CVE-2009-2140.
Live For Speed S2 - Duplicate Join Packet Remote Denial of Service
Live For Speed S2 - Duplicate Join Packet Remote Denial of Service source: https://www.securityfocus.com/bid/36114/info Live For Speed S2 is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to...
CVE-2009-2962
CVE-2009-2692 is a Linux kernel local privilege-escalation/DoS flaw arising from SOCKOPS_WRAP not initializing the sendpage operation in proto_ops, enabling a local user to escalate privileges via sock_sendpage(). Public references indicate affected kernel 2.4/2.6 platforms; exploits exist (e.g.,...
CVE-2009-2845
The CVE-2009-2768 entry describes a vulnerability in the Linux kernel flat subsystem (fs/binfmt_flat.c: load_flat_shared_library) prior to 2.6.31-rc6. Local users could trigger a denial of service by executing a shared flat binary, causing a NULL pointer dereference and a system crash (potential ...