6710 matches found
CVE-2007-6630: Undefined Security Weakness
The Urlinit function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a denial of service NULL dereference and daemon crash via a malformed URI containing a "/:" sequence, as demonstrated by a "DESCRIBE /: RTSP/1.0" request...
MS Internet Explorer 6 Table.Frameset NULL Dereference Vulnerability
No description provided by source. !-- http://browserfun.blogspot.com/ The following bug was tested on the latest version of Internet Explorer 6 on a fully-patched Windows XP SP2 system. This bug was found by Aviv Raff using the DOM-Hanoi fuzzer script. DOM-Hanoi works by building trees of ...
Race condition
Race condition in the Remote Procedure Call kernel module rpcmod in Sun Solaris 8 through 10 allows local users to cause a denial of service NULL dereference and panic via unspecified vectors...
CVE-2007-6180: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the Remote Procedure Call kernel module rpcmod in Sun Solaris 8 through 10 allows local users to cause a denial of service NULL dereference and panic via unspecified vectors...
CVE-2007-4346: Undefined Security Weakness
The Job Engine bengine.exe service in Symantec Backup Exec for Windows Servers BEWS 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service NULL dereference and service crash via a crafted packet to port 5633/tcp...
CVE-2007-5824
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...
Authorization
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...
CVE-2007-5824
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...
CVE-2007-5824
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...
CVE-2007-5824: Improper Input Validation
webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...
CVE-2007-4999
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service NULL dereference and application crash via a message that contains invalid HTML data, a different vector than CVE-2007-4996...
DEBIAN-CVE-2007-4999
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service NULL dereference and application crash via a message that contains invalid HTML data, a different vector than CVE-2007-4996...
CVE-2007-4999
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service NULL dereference and application crash via a message that contains invalid HTML data, a different vector than CVE-2007-4996...
CVE-2007-4999: Improper Input Validation
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service NULL dereference and application crash via a message that contains invalid HTML data, a different vector than CVE-2007-4996...
CVE-2003-1441
CVE-2003-1441 affects Posadis 0.50.4 through 0.50.8. A DNS message with no question section can trigger a null dereference, causing a denial of service. The provided documents do not specify any exploit details beyond this behavior, nor any official remediation or mitigations. No further vendor o...
CVE-2003-1441: Improper Input Validation
Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service crash via a DNS message without a question section, which triggers null dereference...
CVE-2002-2286
Technical details for CVE-2002-2286 are not publicly provided in the supplied documents. No affected product/version or root cause is specified beyond the general description. Monitor for updates.
CVE-2002-2286: Undefined Security Weakness
The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service crash via an empty HTTP request, which causes a null dereference...
Design/Logic Flaw
The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...
CVE-2007-5369
The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a string to the VoIP port 52999/tcp with an invalid value in the third byte...