CWE-476 Archives - CVE Vulnerability

CVE-2008-2812

Sun, 26 Feb 2023 09:09:42 +0000

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.

The post CVE-2008-2812 appeared first on CVE Vulnerability.

CVE-2008-1672

Sun, 26 Feb 2023 09:09:08 +0000

OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses “particular cipher suites,” which triggers a NULL pointer dereference.

The post CVE-2008-1672 appeared first on CVE Vulnerability.

CVE-2007-1327

Sun, 26 Feb 2023 09:05:49 +0000

The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a request without a cipher algorithm and an invalid HMAC algorithm.

The post CVE-2007-1327 appeared first on CVE Vulnerability.

CVE-2007-0887

Sun, 26 Feb 2023 09:05:39 +0000

axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a base64-encoded “*x00” sequence on the imap port (143/tcp).

The post CVE-2007-0887 appeared first on CVE Vulnerability.

CVE-2007-0039

Sun, 26 Feb 2023 09:05:20 +0000

The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception.

The post CVE-2007-0039 appeared first on CVE Vulnerability.

CVE-2018-9190

Sun, 26 Feb 2023 06:51:46 +0000

A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver.

The post CVE-2018-9190 appeared first on CVE Vulnerability.

CVE-2018-9240

Sun, 26 Feb 2023 06:51:46 +0000

ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash and denial of service could occur.

The post CVE-2018-9240 appeared first on CVE Vulnerability.

CVE-2018-9151

Sun, 26 Feb 2023 06:51:45 +0000

A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030.

The post CVE-2018-9151 appeared first on CVE Vulnerability.

CVE-2018-9165

Sun, 26 Feb 2023 06:51:45 +0000

The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted SWF file.

The post CVE-2018-9165 appeared first on CVE Vulnerability.

CVE-2018-9132

Sun, 26 Feb 2023 06:51:44 +0000

libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

The post CVE-2018-9132 appeared first on CVE Vulnerability.