Memory corruption

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

Ekiga VoIP/video application DoS

SIPURL::GetHostAddress invalid memory allocation...

CVE-2006-7206

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString...

Design/Logic Flaw

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-1476

The SymTDI device driver SYMTDI.SYS in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service system crash by sending crafted data to...

SUSE-SA:2006:060: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:060 clamav. Two security problems have been found and fixed in the anti virus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute...

Mandrake Linux Security Advisory : heartbeat (MDKSA-2006:142)

Two vulnerabilities in heartbeat prior to 2.0.6 was discovered by Yan Rong Ge. The first is that heartbeat would set insecure permissions in an shmget call for shared memory, allowing a local attacker to cause an unspecified denial of service via unknown vectors CVE-2006-3815. The second is a...

Multiple vulnerabilities in UFO2000 svn 1057

Luigi Auriemma Application: UFO2000 http://ufo2000.sourceforge.net Versions: = SVN 1057 Platforms: Windows, nix, BSD, Mac and more Bugs: A buffer-overflow in recvaddunit B invalid memory access in decodestringmap C possible code execution through arrays D SQL injection E mapdata global buffer...

Microsoft Word 2000/2003 - Unchecked Boundary Condition

/------------------------------------------------------------ Microsoft Word unchecked boundary condition vulnerability. --------------------------------------------------------- One of the functions in mso.dll older versions mso9.dll cannot properly handle the specially crafted files causing...

Design/Logic Flaw

The raydiumnetworkread function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a large ID, which causes an invalid memory access buffer over-read...

CVE-2006-2412

The raydiumnetworkread function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a large ID, which causes an invalid memory access buffer over-read...

CVE-2006-2393

The clientcmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service application crash by causing long text strings to be appended to the player-client buffer, which causes an invalid memory access...

Buffer overflow

The clientcmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service application crash by causing long text strings to be appended to the player-client buffer, which causes an invalid memory access...

CVE-2006-2393

The CVE-2006-2393 entry documents a vulnerability in Empire (server) prior to and including version 4.3.2, where the client_cmd function can be triggered remotely. The underlying issue is that excessively long text strings appended to the player->client buffer lead to an invalid memory access,...

CVE-2006-2393

The clientcmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service application crash by causing long text strings to be appended to the player-client buffer, which causes an invalid memory access...

Ubuntu 5.04 / 5.10 : linux-source-2.6.10, linux-source-2.6.12 vulnerabilities (USN-281-1)

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

CVE-2006-0034

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...

Heap overflow

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or...