5828 matches found
PT-2012-3629 · Microsoft · Data Access Components +1
Name of the Vulnerable Software and Affected Versions: Microsoft Data Access Components MDAC versions 2.8 SP1 through 2.8 SP2 Windows Data Access Components WDAC version 6.0 Description: The issue allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an...
RedHat Update for libpng RHSA-2011:1105-01
Check for the Version of libpng OpenVAS Vulnerability Test RedHat Update for libpng RHSA-2011:1105-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Immunity Canvas: MS12_043
Name| ms12043 ---|--- CVE| CVE-2012-1889 Exploit Pack| CANVAS Description| MS12-043 Microsoft Internet Explorer XML Core Services Uninitialized Memory Corruption Notes| CVE Name: CVE-2012-1889 VENDOR: Microsoft Notes: This exploit takes advantage of an uninitialized variable vulnerability as...
QuickTime < 7.7.2 Multiple Vulnerabilities
Binary data 6489.prm...
CVE-2012-0654
libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted certificate...
PT-2012-2761
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted X.509 certificate, due to libsecurity accessing uninitialized memory locations during...
VMware Backdoor Response Uninitialized Memory Potential VM Break
VMware Backdoor Response Uninitialized Memory Potential VM Break Derek Soeder [email protected] Reported: December 5, 2011 Published: May 3, 2012 AFFECTED VENDOR --------------- VMware, Inc. AFFECTED ENVIRONMENTS --------------------- The following VMware product versions are known to be...
VMWare privilege escalation
Uninitialized memory reference on guest system call processing...
VMware Backdoor ghi.guest.trashFolder.state Uninitialized Memory Potential VM Break
VMware Backdoor ghi.guest.trashFolder.state Uninitialized Memory Potential VM Break Derek Soeder [email protected] Reported: December 5, 2011 Published: May 3, 2012 AFFECTED VENDOR --------------- VMware, Inc. AFFECTED ENVIRONMENTS --------------------- The following VMware product versions ar...
VMware Backdoor Response Uninitialized Memory Potential VM Break
VMware Backdoor Response Uninitialized Memory Potential VM Break Derek Soeder [email protected] Reported: December 5, 2011 Published: May 3, 2012 AFFECTED VENDOR --------------- VMware, Inc. AFFECTED ENVIRONMENTS --------------------- The following VMware product versions are known to be...
php53 security update
CentOS Errata and Security Advisory CESA-2012:0092 Updated php53 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base scor...
RedHat Update for php53 RHSA-2012:0092-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mozilla Foundation Security Advisory 2012-06
Mozilla Foundation Security Advisory 2012-06 Title: Uninitialized memory appended when encoding icon images may cause information disclosure Impact: High Announced: January 31, 2012 Reporter: Tim Abraldes Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 10.0 Thunderbird 10.0 SeaMonkey...
CVE-2011-3458
QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 file...
PT-2012-1704
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 QuickTime versions prior to the version in 10.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MP4 file, due to the failure to preven...
FreeBSD : mozilla -- multiple vulnerabilities (0a9e2b72-4cb7-11e1-9146-14dae9ebcf89)
The Mozilla Project reports : MFSA 2012-01 Miscellaneous memory safety hazards rv:10.0/ rv:1.9.2.26 MFSA 2012-02 Overly permissive IPv6 literal syntax MFSA 2012-03 iframe element exposed across domains via name attribute MFSA 2012-04 Child nodes from nsDOMAttribute still accessible after removal ...
CVE-2011-3458: Undefined Security Weakness
QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MP4 file...
Critical: php
Issue Overview: It was discovered that the fix for CVE-2011-4885 introduced an uninitialized memory use flaw. A remote attacker could send a specially-crafted HTTP request to cause the PHP interpreter to crash or, possibly, execute arbitrary code. Affected Packages: php Issue Correction: Run yum...
Firefox < 10.0 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox 9.x is potentially affected by the following security issues : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - Various memory safety issues exist. CVE-2012-0442, CVE-2012-0443 - Memory corruption errors exist related t...
Uninitialized memory appended when encoding icon images may cause information disclosure — Mozilla
Mozilla developer Tim Abraldes reported that when encoding images as image/vnd.microsoft.icon the resulting data was always a fixed size, with uninitialized memory appended as padding beyond the size of the actual image. This is the result of mImageBufferSize in the encoder being initialized with...