Huawei H323 Protocol Null Pointer Reference Vulnerability in Various Products

AR120-S, AR1200, DP300, RSE6500, Secospace USG6300, ViewPoint 8660 are all network equipment from Huawei China. A null pointer reference vulnerability exists in the H323 protocol of several Huawei products, which allows an attacker to send malformed messages to the affected devices without...

SUSE-SU-2018:0864-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes several issues. These security issues were fixed: - CVE-2017-11524: The WriteBlob function allowed remote attackers to cause a denial of service assertion failure and application exit via a crafted file bsc1050087 - CVE-2017-16353: Prevent memory information...

SUSE-SU-2018:0858-1 Security update for graphite2

This update for graphite2 fixes the following issues: - CVE-2018-7999: Fixed a NULL pointer dereference vulnerability in Segment.cpp that may cause a denial of serivce bsc1084850...

Design/Logic Flaw

Teluu PJSIP version 2.7.1 and earlier contains a Access of Null/Uninitialized Pointer vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerability appears to have been fixed in 2.7.2...

CVE-2017-17133

Huawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to insufficient verification. An authenticated local attacker could place a malicious license file into system which cause memory null pointer accessing and related processing crash. The attacker can exploi...

CVE-2017-17135

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700...

CVE-2017-17133

Huawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to insufficient verification. An authenticated local attacker could place a malicious license file into system which cause memory null pointer accessing and related processing crash. The attacker can exploi...

Null pointer reference vulnerability in WPS Office 2016 demo pptxrw module

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in the pptxrw module of the WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by an attacker to cause a denial of service...

SoftZone office demo prone to null pointer reference vulnerability (CNVD-2018-04281)

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. RZoffice Presentations.exe has a null pointer reference vulnerability when handling special ppt files. An attacker can exploit the...

SoftZone office demo prone to null pointer reference vulnerability

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. RZoffice Presentations.exe has a null pointer reference vulnerability when handling special ppt files. An attacker can exploit the...

CVE-2018-6644

SBLIM Small Footprint CIM Broker SFCB 1.4.9 has a null pointer DoS vulnerability via a crafted POST request to the /cimom URI...

CVE-2018-6644

SBLIM Small Footprint CIM Broker SFCB 1.4.9 has a null pointer DoS vulnerability via a crafted POST request to the /cimom URI...

Extreme Office 2017 version V1.0.3.3 suffers from a null pointer reference vulnerability (CNVD-2018-03746)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2017 suffers from a null pointer reference vulnerability when dealing with special ppt files, which can be exploited by an attacker to cause a denial of service...

Null Pointer Reference Vulnerability in AnyPDF Reader 5.5

AnyPDF Reader is a simple and practical PDF reader developed by Beijing Ancetone Information Technology Co. AnyPDF Reader version 5.5 has a null pointer reference vulnerability when dealing with special PDF files. An attacker could exploit this vulnerability to cause a denial of service attack...

Gaaiho Reader suffers from a null pointer reference vulnerability (CNVD-2018-03649)

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. A null pointer reference vulnerability exists when Gaaiho Reader handles special PDF files. This vulnerability can be exploited by attackers to launch denial of service attacks...

Null Pointer Reference Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. A null pointer reference vulnerability exists when Gaaiho Reader handles special PDF files. This vulnerability can be exploited by attackers to launch denial of service attacks...

Updated jbig2dec packages fix security vulnerability

libjbig2dec.a in Artifex jbig2dec 0.13 has a NULL pointer dereference in the jbig2huffmanget function in jbig2huffman.c. For example, the jbig2dec utility will crash segmentation fault when parsing an invalid file CVE-2017-9216...

Null pointer dereference

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerException that can lead to a privilege escalation scenario...

Null Pointer Vulnerability in WPS Forms

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer vulnerability exists in the form et.exe in WPS when parsing a specific xls file etmain, which can be exploited by an attacker to cause a denial of service or code execution...

WPS Presentation suffers from a null pointer reference vulnerability (CNVD-2017-33982)

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in the pptxrw module of the WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or...