2874 matches found
Null pointer dereference
The pharmakedirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service uninitialized pointer dereference or possibly have unspecified other impact via a crafted TAR archi...
CVE-2016-4343
The pharmakedirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service uninitialized pointer dereference or possibly have unspecified other impact via a crafted TAR archi...
CVE-2016-4343
Removed by vendor...
CVE-2016-4343: Access of Uninitialized Pointer
The pharmakedirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service uninitialized pointer dereference or possibly have unspecified other impact via a crafted TAR archi...
CVE-2016-4498
Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2016-4498
CVE-2016-4498 affects Panasonic FPWIN Pro 5.x–7.x (up to version 7.130). The root cause is an uninitialized pointer access in the FPWIN Pro project processing (notably in CPlcSetting::Load per ZDI-16-332), which can crash the application and, per advisories, may enable code execution under certai...
CVE-2016-4498
Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors...
CVE-2016-4498: Improper Input Validation
Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors...
Panasonic FPWIN Pro CPlcSetting::Load Uninitialized Pointer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...
PT-2016-5981
Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro versions 5.x through 7.x before 7.130 Description The issue allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors due to the software accessing an uninitialized pointe...
Microsoft Edge Memory Corruption (MS16-052: CVE-2016-0191)
A remote code execution vulnerability has been reported in Microsoft Edge. The vulnerability is due to a use of uninitialized pointer. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory corruption in a way that would...
PT-2016-3412
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.18 PHP versions 7.x prior to 7.0.3 Description The issue is related to the phar make dirstream function, which mishandles zero-size ././@LongLink files in crafted TAR archives. This can be exploited by remote attacker...
CVE-2016-2413: Undefined Security Weakness
media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka...
The vulnerability of Asterisk IP-telephony management systems and Certified Asterisk, which allows a perpetrator to trigger a service failure.
The vulnerability of Asterisk IP-telephony systems and Certified Asterisk is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to cause service failures pointer assignment of an uninitialized pointer and emergency termination of operations...
php: uninitialized pointer in phar_make_dirstream()
A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...
CVE-2016-1005: Access of Uninitialized Pointer
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a deni...
Adobe Flash MPEG-4 Uninitialized Pointer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MPEG-4 parsing. A...
Adobe Flash MPEG-4 Parsing Uninitialized Pointer Remote Code Execution Vulnerability
Adobe FlashPlayer is a multimedia program player. A security vulnerability exists in Adobe Flash's MPEG-4 parsing that could force an indirect reference to an uninitialized pointer. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...
Adobe Flash MPEG Parsing Uninitialized Pointer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within MPEG-4 parsing. A...
