CWE-416 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-416/ Sun, 26 Feb 2023 09:10:50 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-416 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-416/ 32 32 CVE-2008-5038 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5038/ Sun, 26 Feb 2023 09:10:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5038/ Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of “Get NCP Extension Information By Name” requests that cause one thread to operate on […]

The post CVE-2008-5038 appeared first on CVE Vulnerability.

]]> Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 for Windows allows remote attackers to cause a denial of service and possibly execute arbitrary code via a sequence of “Get NCP Extension Information By Name” requests that cause one thread to operate on memory after it has been freed in another thread, which triggers memory corruption, aka Novell Bug 373852.

The post CVE-2008-5038 appeared first on CVE Vulnerability.

]]> CVE-2008-3077 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3077/ Sun, 26 Feb 2023 09:09:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3077/ arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks task_struct references into the sys32_ptrace function, which allows local users to cause a denial of service (system crash) or have unspecified other impact via unknown vectors, possibly a use-after-free vulnerability.

The post CVE-2008-3077 appeared first on CVE Vulnerability.

]]> arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks task_struct references into the sys32_ptrace function, which allows local users to cause a denial of service (system crash) or have unspecified other impact via unknown vectors, possibly a use-after-free vulnerability.

The post CVE-2008-3077 appeared first on CVE Vulnerability.

]]> CVE-2008-0077 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0077/ Sun, 26 Feb 2023 09:08:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0077/ Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka “Property Memory Corruption Vulnerability.”

The post CVE-2008-0077 appeared first on CVE Vulnerability.

]]> Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka “Property Memory Corruption Vulnerability.”

The post CVE-2008-0077 appeared first on CVE Vulnerability.

]]> CVE-2007-3929 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-3929/ Sun, 26 Feb 2023 09:06:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-3929/ Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.

The post CVE-2007-3929 appeared first on CVE Vulnerability.

]]> Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.

The post CVE-2007-3929 appeared first on CVE Vulnerability.

]]> CVE-2018-9977 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9977/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9977/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Modifier Chain objects in U3D files. The issue results […]

The post CVE-2018-9977 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of Modifier Chain objects in U3D files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5427.

The post CVE-2018-9977 appeared first on CVE Vulnerability.

]]> CVE-2018-9944 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9944/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9944/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addLink method. The issue results from the lack of validating the […]

The post CVE-2018-9944 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the addLink method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5379.

The post CVE-2018-9944 appeared first on CVE Vulnerability.

]]> CVE-2018-9945 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9945/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9945/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the getField method. The issue results from the lack of validating the […]

The post CVE-2018-9945 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the getField method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5382.

The post CVE-2018-9945 appeared first on CVE Vulnerability.

]]> CVE-2018-9951 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9951/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9951/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CPDF_Object objects. The issue results from the lack of […]

The post CVE-2018-9951 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CPDF_Object objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5414.

The post CVE-2018-9951 appeared first on CVE Vulnerability.

]]> CVE-2018-9952 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9952/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9952/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA Button elements. When setting the formattedValue attribute, the […]

The post CVE-2018-9952 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA Button elements. When setting the formattedValue attribute, the process does not properly validate the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5527.

The post CVE-2018-9952 appeared first on CVE Vulnerability.

]]> CVE-2018-9953 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9953/ Sun, 26 Feb 2023 06:51:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9953/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA resolveNodes method of Button elements. The issue results from the […]

The post CVE-2018-9953 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA resolveNodes method of Button elements. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5528.

The post CVE-2018-9953 appeared first on CVE Vulnerability.

]]>