CVE-2012-2426

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...

Integer overflow

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

Null pointer dereference

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...

Heap overflow

Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation...

CVE-2012-2428

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

CVE-2012-2428

CVE-2012-2428 affects xArrow server prior to version 3.4.1. The vulnerability is an integer overflow that enables an out-of-bounds read via a crafted packet, allowing remote code execution. Public sources consistently describe the issue as part of multiple related memory-safety flaws in xArrow (s...

CVE-2012-2426

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...

CVE-2012-2427

Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation...

CVE-2012-2427

CVE-2012-2427 affects the xArrow server prior to version 3.4.1. The vulnerability is a heap-based buffer overflow that allows remote attackers to execute arbitrary code by sending crafted packets that trigger an invalid free operation. Public disclosures in multiple feeds corroborate the issue an...

CVE-2012-2426

The vulnerability CVE-2012-2426 affects xArrow server versions older than 3.4.1, caused by improper memory allocation that can allow remote attackers to trigger a NULL pointer dereference and crash the daemon (DoS). Public sources concur on a DoS impact; no exploits are documented in the provided...

CVE-2012-2429

The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-2429

The CVE-2012-2429 issue concerns the xArrow server prior to version 3.4.1, where an invalid read operation could allow remote attackers to execute arbitrary code via unspecified vectors. The vulnerability is tied to the xArrow memory handling (CWE-119/125/476 families described in the broader adv...

xArrow Multiple Vulnerabilities

Overview This advisory is a follow-up to ICS-ALERT-12-065-01 xArrow Vulnerabilities that was published March 05, 2012. Independent security researcher Luigi Auriemma identified and released four security vulnerabilities, along with proof-of-concept code, in the xArrow software application without...