CVE-2011-3300

Cisco CVE-2011-3300 covers SunRPC inspection DoS vulnerabilities in Cisco ASA 5500 Series and the ASA Services Module (FWSM) for Catalyst 6500/7600. Affected product scope includes ASA software trains 7.0, 7.1, 7.2, 8.0–8.5 (specific fixed releases per train) and the FWSM software 3.1–4.x. The vu...

Code injection

The NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload or hang via malformed NetMeeting Directory aka Internet Locator Service or ILS LDAP traffic, aka Bug ID CSCtd10712...

CVE-2011-3281: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 15.0 through 15.1, in certain HTTP Layer 7 Application Control and Inspection configurations, allows remote attackers to cause a denial of service device reload or hang via a crafted HTTP packet, aka Bug ID CSCto68554...

CVE-2011-3369: Undefined Security Weakness

The addconversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an RPC packet, related to the getrpc function in decodeproto.c...

CVE-2011-2997: Undefined Security Weakness

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

PT-2011-4240

Name of the Vulnerable Software and Affected Versions ANGLE versions prior to the version used in Mozilla Firefox 7.0 Mozilla Firefox versions prior to 7.0 SeaMonkey versions prior to 2.4 Description The issue allows remote attackers to cause a denial of service, potentially leading to an...

CVE-2011-3348: Uncontrolled Resource Consumption

The modproxyajp module in the Apache HTTP Server before 2.2.21, when used with modproxybalancer in certain configurations, allows remote attackers to cause a denial of service temporary "error state" in the backend server via a malformed HTTP request...

CVE-2011-2846

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event handling...

CVE-2011-2834

Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling...

CVE-2011-2854

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "ruby / table style handing."...

CVE-2011-2857

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the focus controller...

CVE-2011-3489: Improper Restriction of Operations within the Bounds of a Memory Buffer

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446 that triggers 1 "a memset zero overflow" or 2 an out-of-bounds read, related to improper handling of ...

PT-2011-4156

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.163 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors related to table styles. Recommendations For versions...

PT-2011-4480

Name of the Vulnerable Software and Affected Versions Progea Movicon / PowerHMI versions 11.2.1085 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and crash, and possibly execute arbitrary code. This is achieved by sending an...

PT-2011-4470

Name of the Vulnerable Software and Affected Versions RSLogix versions 19 and earlier Description The issue allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446. This is related to improper handling of a 32-bit size field and can...

PT-2011-4150

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.163 Description The issue is related to a use-after-free vulnerability, which allows remote attackers to cause a denial of service or possibly have other unspecified impacts. This is achieved via vector...

CVE-2011-3322: Improper Restriction of Operations within the Bounds of a Memory Buffer

Core Server HMI Service Coreservice.exe in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password to the Telnet TCP/23 port, which triggers an out-of-bounds read or...

CVE-2011-3200

Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 through 5.8.4 might allow remote attackers to cause a denial of service application exit via a long TAG in a legacy syslog message...

CVE-2011-2577: Undefined Security Weakness

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service crash via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq465...

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...