CWE-665 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-665/ Sun, 26 Feb 2023 09:10:49 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-665 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-665/ 32 32 CVE-2008-5021 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5021/ Sun, 26 Feb 2023 09:10:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5021/ nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access […]

The post CVE-2008-5021 appeared first on CVE Vulnerability.

]]> nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by modifying properties of a file input element while it is still being initialized, then using the blur method to access uninitialized memory.

The post CVE-2008-5021 appeared first on CVE Vulnerability.

]]> CVE-2008-3637 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3637/ Sun, 26 Feb 2023 09:10:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3637/ The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to execute arbitrary code via a crafted applet, related to an “error checking issue.”

The post CVE-2008-3637 appeared first on CVE Vulnerability.

]]> The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to execute arbitrary code via a crafted applet, related to an “error checking issue.”

The post CVE-2008-3637 appeared first on CVE Vulnerability.

]]> CVE-2007-3749 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-3749/ Sun, 26 Feb 2023 09:06:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-3749/ The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process.

The post CVE-2007-3749 appeared first on CVE Vulnerability.

]]> The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process.

The post CVE-2007-3749 appeared first on CVE Vulnerability.

]]> CVE-2018-8514 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8514/ Sun, 26 Feb 2023 06:51:30 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8514/ An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka “Remote Procedure Call runtime Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows […]

The post CVE-2018-8514 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka “Remote Procedure Call runtime Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The post CVE-2018-8514 appeared first on CVE Vulnerability.

]]> CVE-2018-8407 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8407/ Sun, 26 Feb 2023 06:51:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8407/ An information disclosure vulnerability exists when “Kernel Remote Procedure Call Provider” driver improperly initializes objects in memory, aka “MSRPC Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 […]

The post CVE-2018-8407 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists when “Kernel Remote Procedure Call Provider” driver improperly initializes objects in memory, aka “MSRPC Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The post CVE-2018-8407 appeared first on CVE Vulnerability.

]]> CVE-2018-8408 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8408/ Sun, 26 Feb 2023 06:51:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8408/ An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka “Windows Kernel Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The post CVE-2018-8408 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka “Windows Kernel Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The post CVE-2018-8408 appeared first on CVE Vulnerability.

]]> CVE-2018-8419 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8419/ Sun, 26 Feb 2023 06:51:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8419/ An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka “Windows Kernel Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE […]

The post CVE-2018-8419 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka “Windows Kernel Information Disclosure Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8336, CVE-2018-8442, CVE-2018-8443, CVE-2018-8445, CVE-2018-8446.

The post CVE-2018-8419 appeared first on CVE Vulnerability.

]]> CVE-2018-8121 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8121/ Sun, 26 Feb 2023 06:51:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8121/ An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka “Windows Kernel Information Disclosure Vulnerability.” This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.

The post CVE-2018-8121 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka “Windows Kernel Information Disclosure Vulnerability.” This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207.

The post CVE-2018-8121 appeared first on CVE Vulnerability.

]]> CVE-2018-7419 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7419/ Sun, 26 Feb 2023 06:51:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7419/ In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization.

The post CVE-2018-7419 appeared first on CVE Vulnerability.

]]> In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization.

The post CVE-2018-7419 appeared first on CVE Vulnerability.

]]> CVE-2018-6947 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6947/ Sun, 26 Feb 2023 06:50:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6947/ An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.

The post CVE-2018-6947 appeared first on CVE Vulnerability.

]]> An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.

The post CVE-2018-6947 appeared first on CVE Vulnerability.

]]>