4650 matches found
kernel: drivers/serial/serial_core.c: reading uninitialized stack memory
The uartgetcount function in drivers/serial/serialcore.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call...
kernel: drivers/net/usb/hso.c: prevent reading uninitialized memory
The hsogetcount function in drivers/net/usb/hso.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call...
CVE-2010-3679
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service mysqld daemon crash via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind...
kernel: net/packet/af_packet.c: reading uninitialized stack memory
net/packet/afpacket.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAPNETRAW capability to read copies of the applicable structures...
kernel: ipc/sem.c: reading uninitialized stack memory
The copysemidtouser function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 IPCINFO, 2 SEMINFO, 3 IPCSTAT, or 4 SEMSTAT command in a semctl system call...
Apple QuickTime Multiple vulnerabilities - Dec10 (Windows)
The host is running QuickTime Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplequicktimemultvulndec10.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple QuickTime Multiple vulnerabilities - Dec10 Windows Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...
Internet Explorer CSS Recursive Import Memory Corruption (CVE-2010-3971)
Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in the way Microsoft Internet Explorer parses HTML pages that contain recursive CSS import. The vulnerability is due to the creation of uninitialized memory during a CSS...
kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory
arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device...
About the security content of QuickTime 7.6.9
About the security content of QuickTime 7.6.9 Last Modified: December 07, 2010 Article: HT4447 Email this article Print this page Summary This document describes the security content of QuickTime 7.6.9. For the protection of our customers, Apple does not disclose, discuss, or confirm security...
kernel: ipc/sem.c: reading uninitialized stack memory
The copysemidtouser function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 IPCINFO, 2 SEMINFO, 3 IPCSTAT, or 4 SEMSTAT command in a semctl system call...
kernel: drivers/video/via/ioctl.c: reading uninitialized stack memory
The viafbioctlgetviafbinfo function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a VIAFBGETINFO ioctl call...
kernel: drivers/char/nozomi.c: reading uninitialized stack memory
The nttyioctltiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call...
kernel: ipc/shm.c: reading uninitialized stack memory
The copyshmidtouser function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."...
kernel: drivers/serial/serial_core.c: reading uninitialized stack memory
The uartgetcount function in drivers/serial/serialcore.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call...
kernel: drivers/video/ivtv/ivtvfb.c: reading uninitialized stack memory
The ivtvfbioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGETVBLANK ioctl call...
kernel: drivers/sound/pci/rme9652/hdsp.c: reading uninitialized stack memory
The sndhdsphwdepioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRVHDSPIOCTLGETCONFIGINFO ioctl call...
kernel: ipc/compat*.c: reading uninitialized stack memory
The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the 1 compatsyssemctl, 2 compatsysmsgctl, and 3 compatsysshmctl functions in...
SuSE 11 / 11.1 Security Update : CUPS (SAT Patch Numbers 3575 / 3576)
This updates fix several bugs, but only the security fixes are listed here : - Special IPP requests allow to crash cupsd remotely. CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 - A NULL pointer dereference exists in the WriteProlog function of the texttops image filte...
Linux Kernel "hdsp.c" IOCTL本地信息泄露漏洞
BUGTRAQ ID: 45063 CVE ID: CVE-2010-4081 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在漏洞，本地攻击者可利用此漏洞获取敏感信息，可能有利于执行其他攻击。 hdspm.c和hdsp.c中的SNDRVHDSPIOCTLGETCONFIGINFO和 SNDRVHDSPIOCTLGETCONFIGINFO允许未授权用户读取未初始化内核栈内存，因为栈上公布的 hdspmconfiginfo的几个字段在复制给用户之前未改变或清零。 Linux kernel 2.6.0 - 2.6.37 厂商补丁：...
CVE-2010-3820
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a...