CVE-2017-8891

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

CVE-2018-20861

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files...

CVE-2017-8400

In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...

CVE-2013-1230

Cisco Unified Communications Domain Manager allows remote attackers to cause a denial of service CPU consumption via a flood of malformed UDP packets, aka Bug ID CSCug47057...

CVE-2013-5565

The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service process crash via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176...

CVE-2017-11367

The shocodecompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service buffer over-read and application crash via malformed compressed data...

CVE-2013-3381

Cisco Hosted Collaboration Mediation allows remote attackers to cause a denial of service CPU consumption via a flood of malformed UDP packets on port 162, aka Bug ID CSCug85756...

CVE-2013-1242

Memory leak in the web framework in the server in Cisco Unified Presence CUP allows remote attackers to cause a denial of service memory consumption via malformed TCP packets, aka Bug ID CSCug38080...

CVE-2012-6465

Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed SVG image...

CVE-2013-2791

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...

CVE-2010-4550

IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service sync failure via a malformed document...

CVE-2011-4871

Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet on TCP port 58723...

CVE-2011-4260

RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a malformed header in an MP4 file...

CVE-2019-19414

There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash...

CVE-2011-1625

Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching DLSw feature is configured, allows remote attackers to cause a denial of service device crash by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerabili...

CVE-2011-3488

Use-after-free vulnerability in Equis MetaStock 11 and earlier allows remote attackers to execute arbitrary code via a malformed 1 mwc chart, 2 mws chart, 3 mwt template, or 4 mwl layout...

CVE-2010-0588

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP 1 RegAvailableLines or 2 FwdStatReq message with an invalid Line number, aka Bug ...

CVE-2010-2998

Array index error in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.0.1 allows remote attackers to execute arbitrary code via malformed sample data in a RealMedia .IVR file, related to a "malformed IVR pointer index" issue...

CVE-2010-2830

The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2, when PIM is enabled, allows remote attackers to cause a denial of service device reload via a malformed IGMP packet, aka Bug ID CSCte14603...

CVE-2011-0946

The NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload or hang via malformed NetMeeting Directory aka Internet Locator Service or ILS LDAP traffic, aka Bug ID CSCtd10712...