CWE-690 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-690/ Sun, 26 Feb 2023 09:10:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-690 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-690/ 32 32 CVE-2008-5183 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5183/ Sun, 26 Feb 2023 09:10:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5183/ cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.

The post CVE-2008-5183 appeared first on CVE Vulnerability.

]]> cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184.

The post CVE-2008-5183 appeared first on CVE Vulnerability.

]]> CVE-2008-1052 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1052/ Sun, 26 Feb 2023 09:08:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1052/ The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails.

The post CVE-2008-1052 appeared first on CVE Vulnerability.

]]> The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails.

The post CVE-2008-1052 appeared first on CVE Vulnerability.

]]> CVE-2022-41957 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-41957/ Thu, 23 Feb 2023 05:20:54 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-41957/ Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara’s predecessor package hummus, are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be […]

The post CVE-2022-41957 appeared first on CVE Vulnerability.

]]> Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara’s predecessor package hummus, are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed. The issue has been patched in muhammara version 3.4.0 and the fix has been backported to version 2.6.2. As a workaround, do not process files from untrusted sources. If using hummus, replace the package with muhammara.

The post CVE-2022-41957 appeared first on CVE Vulnerability.

]]>