5828 matches found
CVE-2013-1232
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
Design/Logic Flaw
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
CVE-2013-1232
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
CVE-2013-1232: Improper Input Validation
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252...
PT-2013-2995
Name of the Vulnerable Software and Affected Versions Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series affected versions not specified Description The issue allows remote attackers to read the contents of uninitialized memory locations via a crafted request...
Mandriva Linux Security Advisory : poppler (MDVSA-2013:143)
Multiple vulnerabilities has been found and corrected in poppler : poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an invalid memory access in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3...
DEBIAN-CVE-2013-1790
poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...
CVE-2013-1790
poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...
CVE-2013-1790
poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...
CVE-2013-1790
CVE-2013-1790 affects poppler’s CCITTFaxStream implementation: poppler/Stream.cc before 0.22.1 may read uninitialized memory via CCITTFaxStream::lookChar, leading to an unspecified impact. The vulnerability is tied to reading uninitialized memory and is documented with a CVSS base of 6.8 (MEDIUM)...
CVE-2013-1790
poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...
CVE-2013-1790
poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...
PT-2013-3396
Name of the Vulnerable Software and Affected Versions poppler versions prior to 0.22.1 Description The issue allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function. Recommendations For...
CVE-2013-1790: Improper Restriction of Operations within the Bounds of a Memory Buffer
poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...
CVE-2013-2635: Undefined Security Weakness
The rtnlfillifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...
DEBIAN-CVE-2012-6549
The isofsexportencodefh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application...
CVE-2013-1790
poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function...
OpenJDK: uninitialized Array JVM memory disclosure (Hotspot, 7198606)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot...
DEBIAN-CVE-2012-3430
The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket...
CVE-2012-3729
CVE-2012-3729 is a kernel vulnerability in Apple iOS (pre-6) related to the Berkeley Packet Filter (BPF) interpreter. The issue is an uninitialized memory access in the kernel’s BPF path, which could allow a local attacker to read kernel memory layout information via a crafted BPF program. The vu...