CVE-2007-4996: Undefined Security Weakness

libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...

Ekiga VoIP/video application DoS

SIPURL::GetHostAddress invalid memory allocation...

CVE-2006-7206

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString...

Design/Logic Flaw

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467: Undefined Security Weakness

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-1476

The SymTDI device driver SYMTDI.SYS in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service system crash by sending crafted data to...

CVE-2007-1476: Improper Input Validation

The SymTDI device driver SYMTDI.SYS in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service system crash by sending crafted data to...

SUSE-SA:2006:060: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:060 clamav. Two security problems have been found and fixed in the anti virus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute...

Mandrake Linux Security Advisory : heartbeat (MDKSA-2006:142)

Two vulnerabilities in heartbeat prior to 2.0.6 was discovered by Yan Rong Ge. The first is that heartbeat would set insecure permissions in an shmget call for shared memory, allowing a local attacker to cause an unspecified denial of service via unknown vectors CVE-2006-3815. The second is a...

CVE-2006-4521: Undefined Security Weakness

The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service invalid memory access...

CVE-2006-5295: Undefined Security Weakness

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

Multiple vulnerabilities in UFO2000 svn 1057

Luigi Auriemma Application: UFO2000 http://ufo2000.sourceforge.net Versions: = SVN 1057 Platforms: Windows, nix, BSD, Mac and more Bugs: A buffer-overflow in recvaddunit B invalid memory access in decodestringmap C possible code execution through arrays D SQL injection E mapdata global buffer...

Microsoft Word 2000/2003 - Unchecked Boundary Condition

/------------------------------------------------------------ Microsoft Word unchecked boundary condition vulnerability. --------------------------------------------------------- One of the functions in mso.dll older versions mso9.dll cannot properly handle the specially crafted files causing...

CVE-2003-1301: Undefined Security Weakness

Sun Java Runtime Environment JRE 1.x before 1.4.211 and 1.5.x before 1.5.006, and as used in multiple web browsers, allows remote attackers to cause a denial of service application crash via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid...

Design/Logic Flaw

The raydiumnetworkread function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a large ID, which causes an invalid memory access buffer over-read...

CVE-2006-2412

The raydiumnetworkread function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause a denial of service application crash via a large ID, which causes an invalid memory access buffer over-read...

Buffer overflow

The clientcmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service application crash by causing long text strings to be appended to the player-client buffer, which causes an invalid memory access...

CVE-2006-2393

The clientcmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service application crash by causing long text strings to be appended to the player-client buffer, which causes an invalid memory access...