Total
11483 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2011-3176 | 1 Novell | 1 Zenworks Configuration Management | 2012-09-06 | 10.0 HIGH | N/A |
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request. | |||||
CVE-2012-4876 | 1 Trendnet | 2 Securview Wireless Internet Camera, Securview Wireless Internet Camera Activex Control | 2012-09-06 | 10.0 HIGH | N/A |
Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method. | |||||
CVE-2009-5123 | 1 Comodo | 1 Comodo Internet Security | 2012-09-02 | 4.3 MEDIUM | N/A |
The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory consumption) via a crafted compressed file. | |||||
CVE-2011-5124 | 1 Bluecoat | 2 Proxyone, Proxysg | 2012-08-27 | 10.0 HIGH | N/A |
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp). | |||||
CVE-2009-5130 | 1 Websense | 1 Websense Email Security | 2012-08-27 | 4.3 MEDIUM | N/A |
The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an attachment with a crafted size. | |||||
CVE-2009-5129 | 1 Websense | 1 Websense V10000 | 2012-08-27 | 5.0 MEDIUM | N/A |
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) via a login attempt with an incorrect password. | |||||
CVE-2009-5128 | 1 Websense | 1 Websense V10000 | 2012-08-27 | 5.0 MEDIUM | N/A |
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via a large file that is not properly handled during buffering. | |||||
CVE-2011-5122 | 1 Comodo | 1 Comodo Internet Security | 2012-08-27 | 4.3 MEDIUM | N/A |
The Antivirus component in Comodo Internet Security before 5.3.175888.1227 allows remote attackers to cause a denial of service (application crash) via a crafted compressed file. | |||||
CVE-2009-5124 | 1 Comodo | 1 Comodo Internet Security | 2012-08-26 | 4.3 MEDIUM | N/A |
The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (application crash) via a crafted packed file. | |||||
CVE-2012-3501 | 1 Darold | 1 Squidclamav | 2012-08-26 | 5.0 MEDIUM | N/A |
The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A. | |||||
CVE-2012-1904 | 1 Realnetworks | 2 Realplayer, Realplayer Sp | 2012-08-24 | 4.3 MEDIUM | N/A |
mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP4 file. | |||||
CVE-2011-4579 | 2 Ffmpeg, Libav | 2 Ffmpeg, Libav | 2012-08-21 | 4.3 MEDIUM | N/A |
The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (memory corruption) via a crafted SVQ1 stream, related to "dimensions changed." | |||||
CVE-2012-0847 | 1 Ffmpeg | 1 Ffmpeg | 2012-08-21 | 4.3 MEDIUM | N/A |
Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file. | |||||
CVE-2011-3945 | 2 Ffmpeg, Libav | 2 Ffmpeg, Libav | 2012-08-20 | 6.8 MEDIUM | N/A |
The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted media file. | |||||
CVE-2011-3951 | 2 Ffmpeg, Libav | 2 Ffmpeg, Libav | 2012-08-20 | 6.8 MEDIUM | N/A |
The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted stereo stream in a media file. | |||||
CVE-2011-4353 | 2 Ffmpeg, Libav | 2 Ffmpeg, Libav | 2012-08-20 | 4.3 MEDIUM | N/A |
The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted VP5 or VP6 stream. | |||||
CVE-2011-4364 | 2 Ffmpeg, Libav | 2 Ffmpeg, Libav | 2012-08-20 | 6.8 MEDIUM | N/A |
Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VMD file, related to corrupted streams. | |||||
CVE-2012-4353 | 1 Sielcosistemi | 2 Winlog Lite, Winlog Pro | 2012-08-19 | 9.3 HIGH | N/A |
Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote attackers to execute arbitrary code via a crafted port-46824 TCP packet that triggers an incorrect file-open attempt by the _TCPIPS_BinOpenFileFP function, a different vulnerability than CVE-2012-3815. NOTE: some of these details are obtained from third party information. | |||||
CVE-2012-2614 | 1 Lattice Semiconductor | 1 Lattice Diamond Programmer | 2012-08-17 | 6.8 MEDIUM | N/A |
Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file. | |||||
CVE-2012-2047 | 1 Adobe | 1 Shockwave Player | 2012-08-15 | 10.0 HIGH | N/A |
Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2046. |