Cross site request forgery (csrf)

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, and SDX20, when initializing scheduler object service request, an out of bounds access could occur due to...

Microsoft Office Memory Corruption (MS15-081: CVE-2015-2469)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in handling of an uninitialized or deleted object. A remote attacker can exploit this issue by enticing a victim to open a specially crafted office file...

Microsoft Internet Explorer Memory Corruption (MS15-056: CVE-2015-1735)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a function call being made through an uninitialized object. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affected versio...

Microsoft Internet Explorer CTreePos Use After Free (MS12-071; CVE-2012-1539)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

CVE-2012-1891

Heap-based buffer overflow in Microsoft Data Access Components MDAC 2.8 SP1 and SP2 and Windows Data Access Components WDAC 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE...

Microsoft XML Core Services memory corruption

Added: 06/27/2012 CVE: CVE-2012-1889 BID: 53934 OSVDB: 82873 Background Microsoft XML Core Services allows developers to create XML-based applications. Problem A memory corruption vulnerability allows command execution when a user opens a specially crafted web page, which causes MSXML to access a...

Microsoft XML Core Services memory corruption

Added: 06/27/2012 CVE: CVE-2012-1889 BID: 53934 OSVDB: 82873 Background Microsoft XML Core Services allows developers to create XML-based applications. Problem A memory corruption vulnerability allows command execution when a user opens a specially crafted web page, which causes MSXML to access a...

Null pointer dereference

Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."...

CVE-2011-1982

CVE-2011-1982 describes an uninitialized object pointer vulnerability in Microsoft Office (notably Office 2007 SP2, and Office 2010 Gold/SP1) that can allow remote code execution when opening Word documents via a crafted file. The underlying issue is an uninitialized pointer in MSO.dll triggered ...

CVE-2011-1982

Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Office Uninitialized Object Pointer Vulnerability."...

Microsoft Office uninitialized object pointer vulnerability

Overview Microsoft Office fails to properly handle certain Word documents, which may allow a remote, unauthenticated attacker to execute arbitrary code. Description Code in the MSO.dll component of Microsoft Office 2003, 2007, and 2010 fails to properly initialize an object pointer when loading...

CVE-2010-2556

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability....

PT-2009-4933 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 8 Description: The issue arises from the improper handling of objects in memory, allowing remote attackers to execute arbitrary code. This can occur when accessing an object that was not properly...

Immunity Canvas: ACROBAT_FLASH

Name| acrobatflash ---|--- CVE| CVE-2009-1862 Exploit Pack| CANVAS Description| Adobe Acrobat Flash Uninitialized object Notes| CVE Name: CVE-2009-1862 VENDOR: Adobe NOTES: Exploitation through an PDF file is more reliable than with a direct HTML/Flash exploit VersionsAffected: 10.0 and below...

PT-2009-4028 · Microsoft · Internet Explorer 7 +1

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 7 for Windows XP SP2 and SP3 Microsoft Internet Explorer 7 for Server 2003 SP2 Microsoft Internet Explorer 7 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer 7 for Server 2008 SP2 Description: A remote code...

PT-2009-3203 · Microsoft · Windows Xp +4

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 Description: A remote code execution issue exis...

Null pointer dereference

CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer...

CVE-2007-4682

CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer...