CWE-824 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-824/ Sun, 26 Feb 2023 09:07:20 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-824 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-824/ 32 32 CVE-2007-4682 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4682/ Sun, 26 Feb 2023 09:07:20 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4682/ CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer.

The post CVE-2007-4682 appeared first on CVE Vulnerability.

]]> CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer.

The post CVE-2007-4682 appeared first on CVE Vulnerability.

]]> CVE-2007-4639 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4639/ Sun, 26 Feb 2023 09:07:19 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4639/ EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which […]

The post CVE-2007-4639 appeared first on CVE Vulnerability.

]]> EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which triggers use of an uninitialized pointer.

The post CVE-2007-4639 appeared first on CVE Vulnerability.

]]> CVE-2007-4000 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4000/ Sun, 26 Feb 2023 09:07:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4000/ The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the “modify policy” privilege to execute arbitrary code via unspecified vectors that trigger a write to an […]

The post CVE-2007-4000 appeared first on CVE Vulnerability.

]]> The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the “modify policy” privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

The post CVE-2007-4000 appeared first on CVE Vulnerability.

]]> CVE-2007-2442 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-2442/ Sun, 26 Feb 2023 09:06:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-2442/ The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.

The post CVE-2007-2442 appeared first on CVE Vulnerability.

]]> The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.

The post CVE-2007-2442 appeared first on CVE Vulnerability.

]]> CVE-2007-1213 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1213/ Sun, 26 Feb 2023 09:05:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1213/ The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.

The post CVE-2007-1213 appeared first on CVE Vulnerability.

]]> The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.

The post CVE-2007-1213 appeared first on CVE Vulnerability.

]]> CVE-2018-9981 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9981/ Sun, 26 Feb 2023 06:51:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9981/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of […]

The post CVE-2018-9981 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5431.

The post CVE-2018-9981 appeared first on CVE Vulnerability.

]]> CVE-2018-7515 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7515/ Sun, 26 Feb 2023 06:51:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7515/ In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets.

The post CVE-2018-7515 appeared first on CVE Vulnerability.

]]> In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets.

The post CVE-2018-7515 appeared first on CVE Vulnerability.

]]> CVE-2018-5860 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5860/ Sun, 26 Feb 2023 06:50:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5860/ In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structure may be used without being initialized correctly.

The post CVE-2018-5860 appeared first on CVE Vulnerability.

]]> In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structure may be used without being initialized correctly.

The post CVE-2018-5860 appeared first on CVE Vulnerability.

]]> CVE-2018-4040 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-4040/ Sun, 26 Feb 2023 06:49:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-4040/ An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specially crafted document can cause certain RTF tokens to dereference a pointer that has been uninitialized and then write to it. An attacker must convince a victim to open a specially crafted document in order to […]

The post CVE-2018-4040 appeared first on CVE Vulnerability.

]]> An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specially crafted document can cause certain RTF tokens to dereference a pointer that has been uninitialized and then write to it. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability.

The post CVE-2018-4040 appeared first on CVE Vulnerability.

]]> CVE-2018-3983 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3983/ Sun, 26 Feb 2023 06:49:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3983/ An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafted document can cause an array fetch to return an uninitialized pointer and then performs some arithmetic before writing a value to the result. Usage of this uninitialized pointer can allow an attacker to corrupt heap […]

The post CVE-2018-3983 appeared first on CVE Vulnerability.

]]> An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafted document can cause an array fetch to return an uninitialized pointer and then performs some arithmetic before writing a value to the result. Usage of this uninitialized pointer can allow an attacker to corrupt heap memory resulting in code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability.

The post CVE-2018-3983 appeared first on CVE Vulnerability.

]]>