Null Pointer Reference Vulnerability in Thunderbolt Video

Xunlei Video is a media player owned by Xunlei, which was officially renamed Xunlei Look Player after the launch of the 3.0 version. A null pointer reference vulnerability exists in the mp4splitter module when Xunlei Video opens a specific MP4 file. An attacker can exploit the vulnerability to...

OPENSUSE-SU-2017:2568-1 Recommended update for openjpeg

This update for openjpeg fixes the following vulnerability: CVE-2016-7445: Null pointer dereference in convert.c could lead to crash bsc999817 The following bug was also fixed: - Programs linked with libopenjpeg1 would expose non-standard math behavior due to usage of -ffast-math in openjpeg...

Null Pointer Reference Vulnerability in PPLive

PPLive is an online video player developed and operated by Shanghai Poly Media Technology Co. A null pointer reference vulnerability exists when PPLive plays or opens a specific mkv file online, which can be exploited by an attacker to conduct a denial of service attack...

Null Pointer Reference Vulnerability in Thunderbolt Video

Xunlei Video is a media player under Xunlei, which was officially renamed Xunlei Look Player after the launch of version 3.0. A null pointer reference vulnerability exists in Xunlei Video when opening certain MP4 files. An attacker can exploit the vulnerability to cause a denial of service,...

Bento4 AP4_HdlrAtom Class Null Pointer Reference Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the AP4HdlrAtom class in Bento4 version 1.5.0-617. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference, segmentation error, and applicati...

CVE-2017-14624

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c...

Null Pointer Reference Vulnerability in WPS Forms (CNVD-2017-30610)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or lead to code execution...

ESXi 6.0 < Build 5485776 Multiple Vulnerabilities (VMSA-2017-0015) (remote check)

The version of the remote VMware ESXi 6.0 host is prior to build 5224529. It is, therefore, affected by multiple vulnerabilities in VMWare Tools and the bundled OpenSSL and Python packages, as well as a NULL pointer dereference vulnerability related to handling RPC requests that could allow an...

WPS Presentation Null Pointer Reference Vulnerability

WPS Office is an office software suite developed independently by Kingsoft Corporation. WPS Presentation wpp.exe in WPS has a null pointer reference vulnerability when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service...

CVE-2017-13065

GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c...

CVE-2017-10965

An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer...

PoDoFo 'PoDoFo::PdfXObject::PdfXObject' function null pointer reference denial of service vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . A null pointer reference vulnerability exists in PoDoFo's 'PoDoFo::PdfXObject::PdfXObject' function. Allows a remote attacker to construct a malicious file and trick the user into parsing it, which can crash the...

ytnef null pointer reference vulnerability

ytnef is an application library for extracting data from winmail.dat files. A null pointer reference vulnerability exists in ytnef. A remote attacker could exploit this vulnerability to construct a malicious file that could be parsed by the user, which could crash the application...

ZZIPlib 'zzip_mem_entry_new' NULL Pointer Reference Denial of Service Vulnerability

ZZIPlib is a lightweight used to extract files from the ZIP file to read the C language package , but also can be used to compress multiple files into zip format , using the zlib library development . ZZIPlib NULL pointer reference denial of service vulnerability. An attacker could exploit this...

JasPer null pointer back-reference vulnerability (CNVD-2016-10308)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A null pointer back-reference vulnerability exists in the JasPer function jpcpidestroy, which can be exploited by an attacker to crash an application and deny service to legitimat...

Security update for php5 (important)

This update for php5 fixes the following security issues: CVE-2016-7411: Memory corruption when destructing deserialized object CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNEDFLAG in BIT field CVE-2016-7413: Use after free in wddxdeserialize CVE-2016-7414: Out of bounds heap...

Microsoft Windows Kernel - win32k!OffsetChildren Null Pointer Dereference

Microsoft Windows Kernel - win32k!OffsetChildren Null Pointer Dereference Source: https://code.google.com/p/google-security-research/issues/detail?id=544 The attached PoC triggers a null pointer vulnerability in OffsetChildren on Windows 7 32-bit. By mapping the null page an attacker can leverage...

SUSE-SU-2015:2218-1 Security update for sblim-sfcb

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders CVE-2015-5185...

SUSE-SU-2015:2116-1 Security update for sblim-sfcb

This update of sblim-sfcb fixes a potential NULL pointer crash in lookupProviders CVE-2015-5185...

3S CODESYS Gateway Null Pointer Exception Vulnerability

CODESYS Gateway Server is a software-defined server. A null pointer exception vulnerability exists in CODESYS Gateway Server 2.3.9.47 and earlier versions when processing certain HTTP POST/GET requests. An attacker could exploit this vulnerability to cause a denial of service...