Microsoft PowerPoint TimeColorBehaviorContainer Floating Point Record Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how...

Debian: Security Advisory (DSA-2161-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2161-1 (openjdk-6)

The remote host is missing an update to openjdk-6 announced via advisory DSA 2161-1. OpenVAS Vulnerability Test $Id: deb21611.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2161-1 openjdk-6 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

SOL12650 - PHP vulnerability CVE-2010-4645

The strtod.c function may allow context-dependent attackers to cause a denial-of-service via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers. Information about this advisory is available at the following location: Note: The previous link...

Check Point's response to Oracle Java Floating-Point Value Denial of Service Vulnerability (CVE-2010-4476)

Symptoms Oracle Java Runtime Environment is prone to a remote denial-of-service vulnerability. Successful attacks will cause applications written in Java to hang, creating a denial-of-service condition. For more details please refer to Oracle Security Alert for CVE-2010-4476. All versions of...

JDK Double.parseDouble Denial-Of-Service

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

php: hang on numeric value 2.2250738585072011e-308 with x87 fpu

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

php: hang on numeric value 2.2250738585072011e-308 with x87 fpu

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

Oracle Java - Floating-Point Value Denial of Service

Oracle Java - Floating-Point Value Denial of Service source: https://www.securityfocus.com/bid/46091/info Oracle Java is prone to a remote denial-of-service vulnerability. Successful attacks will cause applications written in Java to hang, creating a denial-of-service condition. This issue affect...

Oracle Java - Floating-Point Value Denial of Service

source: https://www.securityfocus.com/bid/46091/info Oracle Java is prone to a remote denial-of-service vulnerability. Successful attacks will cause applications written in Java to hang, creating a denial-of-service condition. This issue affects both the Java compiler and Runtime Environment. Sen...

Check Point's response to PHP Floating-Point Value Denial of Service Vulnerability (CVE-2010-4645)

...

[USN-1042-1] PHP vulnerabilities

=========================================================== Ubuntu Security Notice USN-1042-1 January 11, 2011 php5 vulnerabilities CVE-2009-5016, CVE-2010-3436, CVE-2010-3709, CVE-2010-3710, CVE-2010-3870, CVE-2010-4156, CVE-2010-4409, CVE-2010-4645...

PHP 5.2.x < 5.2.17, 5.3.x < 5.3.5 DoS Vulnerability

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

PHP 5.3.2 - 'zend_strtod()' Floating-Point Value Denial of Service

source: https://www.securityfocus.com/bid/45668/info PHP is prone to a remote denial-of-service vulnerability. Successful attacks will cause applications written in PHP to hang, creating a denial-of-service condition. PHP 5.3.3 is vulnerable; other versions may also be affected...

PHP 5.3.2 - zend_strtod() Floating-Point Value Denial of Service

PHP 5.3.2 - zendstrtod Floating-Point Value Denial of Service source: https://www.securityfocus.com/bid/45668/info PHP is prone to a remote denial-of-service vulnerability. Successful attacks will cause applications written in PHP to hang, creating a denial-of-service condition. PHP 5.3.3 is...

Use-After-Free Remote

WebKit does not properly validate floating-point data in Android versions prior to 2.2, which allows a remote arbitrary code execution attack to occur through a crafted HTML page...

Apple Safari Multiple Vulnerabilities (Sep 2010)

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

About the security content of Safari 5.0.2 and Safari 4.1.2

About the security content of Safari 5.0.2 and Safari 4.1.2 Last Modified: September 07, 2010 Article: HT4333 Email this article Print this page Summary This document describes the security content of Safari 5.0.2 and Safari 4.1.2. For the protection of our customers, Apple does not disclose,...

Design/Logic Flaw

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document, related...

Stack overflow

Stack-based buffer overflow in the SpreadSheet Lotus 123 reader wkssr.dll, as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown reco...