RHEL 4 : kernel (RHSA-2011:0162)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0162 advisory. - kernel: tipc: heap overflow in tipcmsgbuild CVE-2010-3859 - kernel: net/packet/afpacket.c: reading uninitialized stack memory CVE-2010-387...

Design/Logic Flaw

The ax25getname function in net/ax25/afax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure...

SuSE 11 Security Update : libpng (SAT Patch Number 1039)

This update of libpng improves the parsing of 1-bit interlaced images. This bug could be abused to use 'out-of-bounds pixels' to read memory. CVE-2009-2042 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 updat...

CVE-2009-2935

Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript...

Design/Logic Flaw

Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript...

CVE-2009-2935

Removed by vendor...

CVE-2009-2935

Google Chrome

openSUSE Security Update : seamonkey (seamonkey-238)

This patch updates SeaMonkey to version 1.1.12, fixing security and other bugs : MFSA 2008-45 / CVE-2008-4069: XBM image uninitialized memory reading MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters stripped from JavaScript before...

CVE-2009-0582

The ntlmchallenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server aka evolution-data-server 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount o...

CVE-2009-0018

CVE-2009-0018 affects Apple Mac OS X 10.4.11 and 10.5.6 via the Remote Apple Events server. The vulnerability stems from improper initialization of a buffer, enabling remote attackers to read portions of memory over the network. The NVD entry assigns a CVSSv2 base score of 7.8 (HIGH) with network...

CVE-2008-2807

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file...

CVE-2008-0420

The CVE-2008-0420 issue affects Mozilla Firefox (before 2.0.0.12), Mozilla Thunderbird (before 2.0.0.12), and SeaMonkey (before 1.1.8). It stems from incorrect calculations in the BMP decoder (nsBMPDecoder.cpp) related to the mColors table for 8-bit BMPs, enabling an out-of-bounds read of heap me...

PHP substr_compare information leak

Integer overflow allows memory reading behind variable boundaries...

SUSE-SA:2006:036: mysql

The remote host is missing the patch for the advisory SUSE-SA:2006:036 mysql. The database server MySQL was updated to fix the following security problems: - Attackers could read portions of memory by using a user name with trailing null byte or via COMTABLEDUMP command CVE-2006-1516,...

Memory corruption

The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service server crash and possibly access database content via an "ALTE...

PostgreSQL multiple security vulnerabilities

Server internal memory regions reading because of invalid datatype handling in SQL functions and with ALTER COLUMN TYPE during request execution...

security flaw

The copyfromuser function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that...

CVE-2006-5393

Cisco Secure Desktop CSD does not require that the ClearPageFileAtShutdown aka CCE-Winv2.0-407 registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session...

CVE-2006-5218

The CVE-2006-5218 entry describes an integer overflow in the systrace_preprepl function (STRIOCREPLACE) within the systrace component of OpenBSD 3.9 and NetBSD 3. This vulnerability can be triggered by large numeric arguments to the systrace ioctl, allowing local users to cause a denial of servic...

CVE-2006-4006

The dogameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the sendpkg function packets.c to use this data size when sending a reply, and allows remote attackers to read portions of server memory...