CVE Vulnerability Catalog

A heap-based buffer overflow in VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream in an RTMP session.

The ZIP archive decompressor in VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted archive.

VideoLAN VLC media player before version 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly execute arbitrary code via a crafted byte stream to the (1) AVI, (2) ASF, or (3) Matroska (aka MKV) demuxer.

Multiple heap-based buffer overflows in VideoLAN VLC media player before version 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted byte stream to the A/52, DTS, or MPEG Audio decoder.

In WebKit in Google Chrome before version 11.0.696.65, there is a bug in RenderSVGText.cpp that improperly casts a variable when handling a block child. This can lead to application crashes or other unknown impacts via a crafted text element in an SVG document.

A use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in WebKit in Google Chrome before version 11.0.696.65 allows remote attackers to cause application crashes or potentially have unspecified other impacts via crafted JavaScript code that calls the removeChild method during interaction with a FRAME element.

An integer underflow in the HTMLFormElement::removeFormElement function in WebKit in Google Chrome before version 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document containing a FORM element.

Integer overflow in the FilterEffect::copyImageBytes function in the SVG filter implementation in WebKit in Google Chrome before version 11.0.696.65 may lead to application crashes or other unspecified impacts via crafted dimensions.

In WebKit in Google Chrome before version 11.0.696.65, there is a vulnerability in RenderSVGResourceFilter.cpp that allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted SVG document leading to a 'stale pointer.'

GNOME Shell 3.14.x before 3.14.1 does not limit the aggregate memory consumption of active PrtSc requests, allowing nearby attackers to execute arbitrary commands on an unattended workstation.

CVE-2014-2217 describes a vulnerability in the RadAsyncUpload control in RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2, allowing remote attackers to write to arbitrary files.

Multiple buffer overflows in AllegroSoft RomPager, used in Huawei Home Gateway products and other vendors, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization.

AllegroSoft RomPager version 4.34 and earlier, used in Huawei Home Gateway products and other vendors, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, known as the 'Misfortune Cookie' vulnerability.

Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

The QSEECOM driver for Linux kernel 3.x has a vulnerability that does not validate certain offset, length, and base values within an ioctl call. This allows attackers to gain privileges or cause a denial of service via a crafted application.

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network.

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically proximate attackers to obtain shell access by opening a device's case and connecting a cable to a serial port.

SQL injection vulnerability in the rate_picture function in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a comparison of a non-numeric value that begins with a digit.

IBM Security AppScan Enterprise versions before 8.5 IFix 002, 8.6 IFix 004, 8.7 IFix 004, 8.8 iFix 003, 9.0.0.1 iFix 003, and 9.0.1 iFix 001 are vulnerable to remote code execution via a crafted executable file in an archive.