106 matches found
CVE-2014-1255
CVE-2014-1255 affects Apple Type Services (ATS) on macOS OS X versions prior to 10.9.2. The root issue is improper validation of calls to the free function when handling Mach messages, allowing an attacker to bypass the App Sandbox protection. The vulnerability enables sandbox bypass via crafted ...
MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2011-004 MIT krb5 Security Advisory 2011-004 Original release: 2011-04-12 Last update: 2011-04-12 Topic: kadmind invalid pointer free CVE-2011-0285 CVSSv2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Base Score: 10 Access...
Buffer overflow
server/parser/spritedefinition.cpp in GNU Gnash aka GNU Flash Player 0.7.2 allows remote attackers to execute arbitrary code via a large number of SHOWFRAME elements within a DEFINESPRITE element, which triggers memory corruption and enables the attacker to call free with an arbitrary address,...
Sun directory server memory corruption
free function is called for non-innitialized pointer...
fetchmail -- crash when bouncing a message
Matthias Andree reports: Fetchmail contains a bug that causes itself to crash when bouncing a message to the originator or to the local postmaster. The crash happens after the bounce message has been sent, when fetchmail tries to free the dynamic array of failed addresses, and calls the free...