92 matches found
CVE-2010-3703: Improper Input Validation
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service crash via a PDF file that triggers an uninitialized...
CVE-2010-3747: Improper Restriction of Operations within the Bounds of a Memory Buffer
An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly initialize an unspecified object component during parsing of a CDDA URI, which allows remote attackers to execute arbitrary code or cause a denial of...
PT-2010-5038
Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.4 RealPlayer Enterprise version 2.1.2 Description The issue arises from an ActiveX control in RealPlayer that fails to properly initialize an object component when...
PT-2010-5013
Name of the Vulnerable Software and Affected Versions poppler versions 0.8.7 through 0.15.1 Description The issue allows context-dependent attackers to cause a denial of service crash via a PDF file that triggers an uninitialized pointer dereference in the PostScriptFunction::PostScriptFunction...
CVE-2010-3702
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer...
CVE-2010-3703
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service crash via a PDF file that triggers an uninitialized...
CVE-2010-1322
The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service daemon crash, or possibly obtain sensitive...
xpdf: uninitialized Gfx::parser pointer dereference
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash via unknown vectors that trigger an uninitialized pointer...
PT-2010-1098
Name of the Vulnerable Software and Affected Versions mit-krb5 versions prior to 1.9.2-r1 MIT Kerberos 5 versions 1.8.x before 1.8.4 Description The issue affects the Key Distribution Center KDC in MIT Kerberos 5, where the merge authdata function in kdc authdata.c does not properly manage an ind...
CVE-2010-1322: Improper Input Validation
The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service daemon crash, or possibly obtain sensitive...
CVE-2010-1322
The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service daemon crash, or possibly obtain sensitive...
