519 matches found
APPLE-SA-2014-04-22-2 iOS 7.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-04-22-2 iOS 7.1.1 iOS 7.1.1 is now available and addresses the following: CFNetwork HTTPProtocol Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: An attacker in a privileged network positio...
Oracle Linux 5 / 6 : libxml2 (ELSA-2012-1288)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1288 advisory. - Change the XPath code to percolate allocation error CVE-2011-1944 - Fix an off by one pointer access CVE-2011-3102 - adds randomization to hash a...
Oracle Linux 5 / 6 : libxml2 (ELSA-2013-0581)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0581 advisory. - fix out of range heap access CVE-2012-5134 - Change the XPath code to percolate allocation error CVE-2011-1944 - Fix an off by one pointer access...
Command injection
The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote servers to cause a denial of service incorrect pointer access and client cra...
CVE-2013-0683: Undefined Security Weakness
The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote servers to cause a denial of service incorrect pointer access and client cra...
DEBIAN-CVE-2013-1584
The dissectversion5and6primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...
UBUNTU-CVE-2013-1583
The dissectversion4primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...
UBUNTU-CVE-2013-1584
The dissectversion5and6primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...
Design/Logic Flaw
RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudio file that triggers access to an invalid pointer...
libxml2 security update
2.7.6-8.0.1.el63.3 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.7.6-8.el63.3 - Change the XPath code to percolate allocation error CVE-2011-1944 2.7.6-8.el63.2 - Fix an off by one pointer access CVE-2011-3102 2.7.6-8.el63.1 - Fix a failure...
Internet Explorer6 空指针访问 DOS(2011-6-15)
No description provided by source. html body script com = document.createElement‘li’; com.setAttribute‘value’, ‘huimaozi’; /script /body /html mshtml!CMarkup::FindMyListContainer: 7e41ea7f 8bff mov edi,edi 7e41ea81 55 push ebp 7e41ea82 8bec mov ebp,esp 7e41ea84 56 push esi 7e41ea85 8b7508 mov...
CVE-2010-3830
CVE-2010-3830 : The connected sources confirm a vulnerability in Apple iOS prior to 4.2 where an invalid pointer is accessed during the processing of packet filter rules. This flaw can allow local users to gain privileges via unspecified vectors. The affected product is iOS; the root cause is the...
kdelibs: Integer overflow in KJS JavaScript garbage collector
The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption a...
Microsoft Excel rtAFDesc record invalid pointer access
Added: 01/17/2008 CVE: CVE-2008-0081 BID: 27305 OSVDB: 40344 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem Microsoft Excel references an uninitialized pointer if a spreadsheet contains an improperly placed...
Microsoft Excel rtAFDesc record invalid pointer access
Added: 01/17/2008 CVE: CVE-2008-0081 BID: 27305 OSVDB: 40344 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem Microsoft Excel references an uninitialized pointer if a spreadsheet contains an improperly placed...
Exception message in Seattle Lab Telnet Server 4.1.1.3758
Luigi Auriemma Application: Seattle Lab Telnet Server http://www.seattlelab.com/products/slnetrf/default.asp Versions: = 4.1.1.3758 Platforms: Windows Bug: exception error message Exploitation: remote Date: 02 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
Exception message in VanDyke VShell 3.0.3.569
Luigi Auriemma Application: Seattle Lab Telnet Server http://www.seattlelab.com/products/slnetrf/default.asp Versions: = 4.1.1.3758 Platforms: Windows Bug: exception error message Exploitation: remote Date: 02 Jan 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
Improper Validation of User-mode Pointers
Improper Validation of User-mode Pointers Many of the hooks that KAV installs and even the custom system services suffer from flaws that are detrimental to the operation of the system. For instance, KAV's modified NtOpenProcess attempts to determine if a user address is valid by comparing it to t...
