CVE-2012-2619: Improper Input Validation

The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service out-of-bounds read and Wi-Fi outage via an RSN 802.11i information element...

CVE-2012-1813: Undefined Security Weakness

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-5122

Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors...

CVE-2012-5126

Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of plug-in placeholders...

PT-2012-5790

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 23.0.1271.64 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts. This issue is related to the handling of extension...

PT-2012-2249

Name of the Vulnerable Software and Affected Versions libfpx versions prior to 1.3.1-1 Description A double free issue in the Free All Memory function in jpeg/dectile.c allows remote attackers to cause a denial of service, resulting in a crash, via a crafted FPX image. Recommendations For version...

CVE-2012-3026: Improper Input Validation

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service memory corruption and service crash or possibly execute arbitrary code via long input data, a different vulnerabili...

CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

PT-2012-2247

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions 0.9.0 through 1.1.12 Description The issue is related to a double free vulnerability in the get chunk header function. This vulnerability allows remote attackers to cause a denial of service, resulting in the...

hMailServer IMAP Remote DoS Vulnerability

hMailServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4517: Undefined Security Weakness

ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service ibacm service crash via a crafted join response...

PT-2012-5465

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.35 Apache Tomcat versions 7.0.0 through 7.0.27 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This occurs when the NIO connector is used in...

PT-2012-5753

Name of the Vulnerable Software and Affected Versions JavaFX versions 2.2 and earlier Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For JavaFX versions 2.2 and earlier, at the moment, there is no...

TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities

High-Tech Bridge Security Research Lab has discovered 2 remote DoS vulnerabilities in TVMOBiLi Media server, which could be exploited to crash remote server with malicious HTTP requests. 1 Improper Handling of Length Parameter Inconsistency in TVMOBiLi: CVE-2012-5451 1.1 The vulnerability exists...

Apache Httpd < 2.2.22 : mod_proxy_ajp remote DoS

A flaw was found when modproxyajp connects to a backend server that takes too long to respond. Given a specific configuration, a remote attacker could send certain requests, putting a backend server into an error state until the retry timeout expired. This could lead to a temporary denial of...

CVE-2012-3505

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via 1 a large number of headers or 2 a large number of forged headers that trigger hash collisions predictably. bucket...

PT-2012-4801

Name of the Vulnerable Software and Affected Versions FreeBSD version 8.2 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and kernel panic, via a crafted ASCONF chunk. Recommendations For FreeBSD version 8.2, update to a newer...

CVE-2012-5332: Undefined Security Weakness

at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field...

CVE-2012-5048: Undefined Security Weakness

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted packet...

PT-2012-5726

Name of the Vulnerable Software and Affected Versions Optimalog Optima PLC versions 1.5.2 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via a crafted packet. Recommendations For versions 1.5.2 and...