CVE-2011-4162: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 AddUser, 2 AddUserEx, 3 RemoveUser, 4 RemoveUserByGuide, 5 RemoveUserEx, and 6 RemoveUserRegardless methods in HP Protect Tools Device Access Manager PTDAM before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a long SidStrin...

Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store

Vulnerability ID: HTB23044 Reference: https://www.htbridge.ch/advisory/heapmemorycorruptioninhpdeviceaccessmanagerforprotecttoolsinformationstore.html Product: HP Device Access Manager for Protect Tools Information Store Vendor: Hewlett-Packard Vulnerable Version: Prior to v.6.1.0.1 Tested Versio...

Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store

No description provided by source. Vulnerable Version: Prior to v.6.1.0.1 Tested Version: 5.0.0.5 Vendor Notification: 26 August 2011 Vulnerability Type: Heap Memory Corruption Status: Fixed by Vendor Risk level: Medium Credit: High-Tech Bridge SA Security Research Lab...

HP Device Access Manager for HP ProtectTools 5.06.0 - Heap Memory Corruption

HP Device Access Manager for HP ProtectTools 5.06.0 - Heap Memory Corruption source: https://www.securityfocus.com/bid/50895/info HP Device Access Manager for HP ProtectTools is prone to a remote heap-memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code...

Adobe Flash Player PlaceObjectX Type Confusion Code Execution (APSB11-28; CVE-2011-2450)

A heap memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a null dereference while handling objects with the PlaceObjectX tag. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malforme...

CVE-2011-4261

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted video dimensions in an MP4 file...

Memory corruption

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted video dimensions in an MP4 file...

CVE-2011-4261

CVE-2011-4261 affects RealNetworks RealPlayer prior to 15.0.0. The vulnerability in the MP4/esds width handling inside the dmp4 component can cause heap memory corruption, potentially enabling remote code execution. Public sources describe an in‑the‑wild risk requiring user interaction (per ZDI a...

CVE-2011-4261

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted video dimensions in an MP4 file...

CVE-2011-4261: Improper Restriction of Operations within the Bounds of a Memory Buffer

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via crafted video dimensions in an MP4 file...

PT-2011-4914

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.0 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This can be achieved via crafted video dimensions in an MP4 file...

CVE-2011-2450

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

CVE-2011-2450

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

Memory corruption

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

CVE-2011-2450

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

CVE-2011-2450: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

PT-2011-3876

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.11 and 11.x prior to 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and prior to 11.1.102.59 on Android Adobe AIR versions prior to 3.1.0.4880 Description The issue allows attackers to execut...

USN-1256-1: Linux kernel (Natty backport) vulnerabilities

It was discovered that the /proc filesystem did not correctly handle permission changes when programs executed. A local attacker could hold open files to examine details about programs running with higher privileges, potentially increasing the chances of exploiting additional vulnerabilities...

FreeBSD Ports: stunnel

The remote host is missing an update to the system as announced in the referenced advisory. VID cdeb34e6-d00d-11e0-987e-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID cdeb34e6-d00d-11e0-987e-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Integer overflow

Integer underflow in the l2capconfigreq function in net/bluetooth/l2capcore.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a small command-size value within the command header of a Logical...