PT-2012-5753

Name of the Vulnerable Software and Affected Versions JavaFX versions 2.2 and earlier Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For JavaFX versions 2.2 and earlier, at the moment, there is no...

TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities

High-Tech Bridge Security Research Lab has discovered 2 remote DoS vulnerabilities in TVMOBiLi Media server, which could be exploited to crash remote server with malicious HTTP requests. 1 Improper Handling of Length Parameter Inconsistency in TVMOBiLi: CVE-2012-5451 1.1 The vulnerability exists...

Apache Httpd < 2.2.22 : mod_proxy_ajp remote DoS

A flaw was found when modproxyajp connects to a backend server that takes too long to respond. Given a specific configuration, a remote attacker could send certain requests, putting a backend server into an error state until the retry timeout expired. This could lead to a temporary denial of...

CVE-2012-3505

Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via 1 a large number of headers or 2 a large number of forged headers that trigger hash collisions predictably. bucket...

PT-2012-4801

Name of the Vulnerable Software and Affected Versions FreeBSD version 8.2 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and kernel panic, via a crafted ASCONF chunk. Recommendations For FreeBSD version 8.2, update to a newer...

CVE-2012-5332: Undefined Security Weakness

at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field...

PT-2012-5726

Name of the Vulnerable Software and Affected Versions Optimalog Optima PLC versions 1.5.2 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via a crafted packet. Recommendations For versions 1.5.2 and...

CVE-2012-5048: Undefined Security Weakness

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted packet...

CVE-2012-2893

Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms...

PT-2012-4344

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description The issue is related to an integer overflow in the WebGL implementation, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impact...

PT-2012-4339

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description A use-after-free issue in the PDF functionality allows remote attackers to cause a denial of service or possibly have other unspecified impacts via a crafted document. Recommendations Fo...

PT-2012-4325

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description A buffer overflow issue exists in the SSE2 optimization functionality, allowing remote attackers to cause a denial of service or possibly have other unspecified impacts via unknown...

PT-2012-4327

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts through vectors related to plug-in handling...

PT-2012-3875

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 7.0.1 through 7.0.1.8 IBM WebSphere MQ version 7.1 IBM WebSphere MQ version 7.5 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid address alignment exception and daemo...

PT-2012-3835

Name of the Vulnerable Software and Affected Versions Apache Qpid versions 0.17 and earlier Description The issue allows remote attackers to cause a denial of service by consuming file descriptors via a large number of incomplete connections, due to improper restriction of incoming client...

CVE-2012-3096: Undefined Security Weakness

Cisco Unity Connection UC 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service resource consumption and administration outage via extended use of the product, aka Bug ID CSCtd79132...

CVE-2012-4244

ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for a long resource record...

PT-2012-5390

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.2.39 Tor versions 0.2.3.x prior to 0.2.3.21-rc Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit. This occurs when a zero-valued port field i...

CVE-2012-2409: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than...

PT-2012-4022

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.6.14 RealPlayer SP versions 1.0 through 1.1.5 Mac RealPlayer versions prior to 12.0.1.1750 Description A buffer overflow issue allows remote attackers to cause a denial of service or possibly have unspecified...