Blink as used in Google Chrome before 50.0.2661.94 does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site related to BindingSecurity.cpp and DOMWindow.cpp.


The kernel in Apple iOS before 9.3.3 OS X before 10.11.6 tvOS before 9.2.2 and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2016-4582 and CVE-2016-4653.


Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia as used in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.


Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request aka Bug ID CSCuz03038.


The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706 6.1.1 before build 404 6.1.2 before build 449 6.1.3 before build 441 and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service (memory corruption and system crash) or gain privileges via a 768 syscall which triggers a zero to be written to an arbitrary kernel memory location.


otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors.


Mozilla Firefox before 45.0 on Linux when an Intel video driver is used allows remote attackers to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.


The FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or cause a denial of service (memory corruption) by changing a file during a FileReader API read operation.


The Disk Images component in Apple iOS before 9.2.1 OS X before 10.11.3 and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record in a LotusWordPro (lwp) document.


The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document.


btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of configuration entries and consequently exceeding the maximum size of a configuration file aka internal bug 26071376.


Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.


in

the

MSM

audio

driver

for

the

Linux

kernel

as

used

in

Qualcomm

Innovation

Center

(QuIC)

Android

contributions

for

MSM

devices

and

other

products

allows

attackers

to

cause

a

denial

of

service

(out-of-bounds

write

and

memory

corruption)

or

possibly

have

unspecified

other

impact

via

a

crafted

application

that

makes

an

ioctl

call

triggering

incorrect

use

of

a

parameters

pointer.


Integer signedness error in the MSM V4L2 video driver for the Linux kernel 3.x as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products allows attackers to gain privileges or cause a denial of service (array overflow and memory corruption) via a crafted application that triggers an msm_isp_axi_create_stream call.


Mozilla Network Security Services (NSS) before 3.23 as used in Mozilla Firefox before 47.0 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.


Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application that makes an ioctl call.


Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted FORMATCHUNK structure.


QEMU when built with the Pseudo Random Number Generator (PRNG) back-end support allows local guest OS users to cause a denial of service (process crash) via an entropy request which triggers arbitrary stack based allocation and memory corruption.


The Minikin library in Android 5.0.x before 5.0.2 5.1.x before 5.1.1 and 6.x before 2016-04-01 does not properly consider negative size values in font data which allows remote attackers to cause a denial of service (memory corruption and reboot loop) via a crafted font aka internal bug 26413177.


Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP2 file.


Internet Communication Manager (aka ICMAN or ICM) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (heap memory corruption and process crash) via a crafted HTTP request related to the IctParseCookies function aka SAP Security Note 2256185.


The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file.


The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.


SAP SLD Registration Program (aka SLDREG) allows local users to cause a denial of service (memory corruption and process termination) via a crafted HOST parameter aka SAP Security Note 2125623.


Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element.


Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory corruption) via a request for a zero byte file.


The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time which leads to memory corruption.


Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation.


The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of service (memory corruption and application crash) via a malformed RAR archive.


The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18 Thunderbird 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption as demonstrated by e4x/extensions/regress-410192.js.


The layout engine in Mozilla Firefox 3.x before 3.0.5 Thunderbird 2.x before 2.0.0.19 and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corruption related to the GetXMLEntity and FastAppendChar functions.


LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption.


The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call related to absence of the DRM_MASTER and DRM_ROOT_ONLY flags in the ioctl's configuration.


retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (daemon crash) via a series of long packets containing 0x00 characters to TCP port 497 that trigger memory corruption probably involving an English product version on a Chinese OS version.


Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (memory corruption) via crafted packets for which the software path is used.


Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during execution of the _make_decode_tree function.


The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corruption and system crash) and possibly have unspecified other impact via a crafted PPPOL2TP packet that results in a large value for a certain length variable.


Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service (memory corruption and application crash) by resolving an alias that contains crafted AFP volume mount information.


Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames which triggers memory corruption related to resize handles.


The

browser

engine

in

Mozilla

Firefox

before

Thunderbird

before

and

SeaMonkey

before

allows

remote

attackers

to

cause

a

denial

of

service

(crash)

and

possibly

trigger

memory

corruption

via

vectors

related

to

the

nsTableFrame::GetFrameAtOrBefore

nsAccessibilityService::GetAccessible

nsBindingManager::GetNestedInsertionPoint

nsXBLPrototypeBinding::AttributeChanged

nsColumnSetFrame::GetContentInsertionFrame

and

nsLineLayout::TrimTrailingWhiteSpaceIn

methods

and

other

vectors.


Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value which triggers memory corruption.


The JavaScript engine in Mozilla Firefox before 2.0.0.12 Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement (2) certain uses of watch and eval (3) certain uses of the mousedown event listener and other vectors.


Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3 VMware Player 2.0.x before 2.0.3 and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger \memory exhaustion and memory corruption.\


VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.


Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems.


Google Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.


The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55 1.2.x before 1.2.45 1.4.x before 1.4.8 and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted PNG image that triggers the reading of uninitialized memory.


Google Chrome before 12.0.742.112 does not properly handle Cascading Style Sheets (CSS) token sequences which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


** DISPUTED ** Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.


chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\\0' characters in SIP packets which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet.


Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs as demonstrated by Firebug.


Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21) 3.2 before 3.2(22) 4.0 before 4.0(16) and 4.1 before 4.1(7) when IPv6 is used allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015 aka Bug ID CSCti83875.


Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial page.


Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.


The IP Service Level Agreement (IP SLA) functionality in Cisco IOS 15.1 and IOS XE 2.1.x through 3.3.x allows remote attackers to cause a denial of service (memory corruption and device reload) via malformed IP SLA packets aka Bug ID CSCtk67073.


The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.


ulp/sdp/sdp_proc.c in the ib_sdp module (aka ib_sdp.ko) in the ofa_kernel package in the InfiniBand driver implementation in OpenFabrics Enterprise Distribution (OFED) before 1.5.3 does not properly handle certain non-array variables which allows local users to cause a denial of service (stack memory corruption and system crash) by reading the /proc/net/sdpstats file.


Google Chrome before 15.0.874.120 does not properly perform VP8 decoding which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted stream.


Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0 5.0 before 5.0.3 and 5.1 before 5.1.1 when IPsec is enabled allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1) IPv4 or (2) IPv6 packet with nested IPComp headers.


The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6 as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function leading to (1) a memory leak or (2) memory corruption a different vulnerability than CVE-2011-1478.


drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations which might allow local users to gain privileges cause a denial of service (memory corruption) or obtain sensitive information from kernel memory via a crafted ioctl call related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.


The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP1 and SP2 Windows Server 2008 Gold SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly restrict the number of console objects for a process which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction aka \CSRSS Local EOP AllocConsole Vulnerability.\


Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service (heap memory corruption) or possibly gain privileges by leveraging write access to /dev/sequencer.


The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP1 and SP2 and Windows Server 2008 Gold and SP2 does not ensure that an unspecified array index has a non-negative value before performing read and write operations which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction aka \CSRSS Local EOP SrvSetConsoleNumberOfCommand Vulnerability.\


Google Chrome before 12.0.742.91 does not properly implement history deletion which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.


The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP1 and SP2 Windows Server 2008 Gold SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly initialize memory and consequently uses a NULL pointer in an unspecified function call which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction aka \CSRSS Local EOP SrvSetConsoleLocalEUDC Vulnerability.\


Array index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service (memory corruption) or possibly gain privileges via a crafted adapter index value that triggers access to an invalid kernel pointer.


Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters and then sending this data to a ROSE socket.


The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain integer field which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a negative value.


Wireshark 1.2.0 through 1.2.14 1.4.0 through 1.4.3 and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.


Samba 3.x before 3.3.15 3.4.x before 3.4.12 and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro which allows remote attackers to cause a denial of service (stack memory corruption and infinite loop or daemon crash) by opening a large number of files related to (1) Winbind or (2) smbd.


Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.


The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38 when a certain Ethernet bridge configuration is used allows local users to cause a denial of service (memory corruption and system crash) by sending IGMP packets to a local interface.


The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted batman-adv ICMP packet.


The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7 0.6.x before 0.6.4 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6 0.6.x before 0.6.4 and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (memory corruption) via a crafted SVQ1 stream related to \dimensions changed.\


Adobe Flash Media Server (FMS) before 3.5.7 and 4.x before 4.0.3 allows attackers to cause a denial of service (memory corruption) via unspecified vectors.


Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors a different vulnerability than CVE-2012-0725.


Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors a different vulnerability than CVE-2012-0724.


Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted .m4a file.


libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application aka internal bug 23707088.


libxml2 in Apple iOS before 9.2 OS X before 10.11.2 and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted XML document a different vulnerability than CVE-2015-7116.


libxml2 in Apple iOS before 9.2 OS X before 10.11.2 and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted XML document a different vulnerability than CVE-2015-7115.


IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


IOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


libnetcore in Apple iOS before 8.3 Apple OS X before 10.10.3 and Apple TV before 7.2 allows attackers to cause a denial of service (memory corruption and application crash) via a crafted configuration profile.


libxml2 in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted XML document.


IOAcceleratorFamily in Apple iOS before 10 OS X before 10.12 tvOS before 10 and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted web site.


IOKit in Apple iOS before 9.2.1 OS X before 10.11.3 and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


libc in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


syslog in Apple iOS before 9.2.1 OS X before 10.11.3 and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


ntfs in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5871 CVE-2015-5872 and CVE-2015-5890.


IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5871 CVE-2015-5873 and CVE-2015-5890.


IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5871 CVE-2015-5872 and CVE-2015-5873.


IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5872 CVE-2015-5873 and CVE-2015-5890.


IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3771 and CVE-2015-3772.


IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3769 and CVE-2015-3772.


udf in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via a malformed DMG image.


AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified Thunderbolt commands.


IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3769 and CVE-2015-3771.


libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted file.


Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file.


AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes which allows remote attackers to cause a denial of service (memory corruption).


libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5877.


The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5830.


The kernel in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-7083.


The kernel in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-7084.


The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5868 and CVE-2015-5903.


The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5868 and CVE-2015-5896.


The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5896 and CVE-2015-5903.


The kernel in Apple OS X before 10.12 tvOS before 10 and watchOS before 3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


The kernel in Apple iOS before 9.2.1 OS X before 10.11.3 and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.


Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105.


Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image that triggers memory corruption.


Apple Mac OS X allows local users to cause a denial of service (memory corruption) via a crafted Mach-O binary with a malformed load_command data structure.


Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to cause a denial of service (memory corruption) via unspecified vectors.


Adobe Reader and Acrobat 8.x before 8.3 9.x before 9.4.5 and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of service (memory corruption) via unspecified vectors.


Adobe Reader and Acrobat 8.x before 8.3 9.x before 9.4.5 and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted font data.


Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.


Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 platforms allows local users to cause a denial of service (memory corruption) by leveraging write access to /dev/sequencer.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.


Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger memory corruption.


Google V8 as used in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


Google V8 as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8 Thunderbird before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption.


Unspecified vulnerability in Apple Mac OS X 10.4.8 and possibly other versions allows remote attackers to cause a denial of service (crash) via a malformed UDTO HFS+ disk image such as with \bad sectors \ which triggers memory corruption.


Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input which triggers memory corruption.


Unspecified vulnerability in the clear_user_list function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service (application crash) via crafted network traffic which triggers memory corruption.


The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.


Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted WAV file.


A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.

denial of service
memory corruption vulnerability
denial of service
memory corruption
code injection


RealNetworks RealPlayer before 16.0.3.51 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed RealMedia file.

denial of service
memory corruption
arbitrary code execution


FFmpeg before 0.5.4 as used in MPlayer and other products allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed WMV file.


DjVuLibre before 3.5.25.3 as used in Evince Sumatra PDF Reader VuDroid and other products allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.


FFmpeg before 0.5.4 as used in MPlayer and other products allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file.


Apple Safari before 3.1.1 when running on Windows XP or Vista allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name which triggers memory corruption.


rsync 3.x before 3.0.8 when certain recursion deletion and ownership options are used allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.


The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file related to authenticode parsing.


WebKit as used in Apple Safari before 6.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2013-1009.


WebKit as used in Apple Safari before 6.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2013-1023.


Skia as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 23648740.


Skia as used in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 20723696.


WebKit as used in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


WebKit as used in Apple iOS before 9.2.1 and Safari before 9.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1723 and CVE-2016-1726.


OpenGL as used in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.


WebKit as used in Apple iOS before 9.2.1 Safari before 9.0.3 and tvOS before 9.1.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1727.


WebKit as used in Apple iOS before 9.2.1 and Safari before 9.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1723 and CVE-2016-1725.


WebKit as used in Apple iOS before 9.2.1 and Safari before 9.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1725 and CVE-2016-1726.


WebKit as used in Apple iOS before 9.2.1 Safari before 9.0.3 and tvOS before 9.1.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2016-1724.


libxslt as used in Apple iOS before 9.3.2 OS X before 10.11.5 tvOS before 9.2.1 and watchOS before 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.


The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28 5.4.x before 5.4.23 and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.


WebKit as used in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 Firefox ESR 24.x before 24.2 Thunderbird before 24.2 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit as used in Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 25.0 Firefox ESR 17.x before 17.0.10 and 24.x before 24.1 Thunderbird before 24.1 Thunderbird ESR 17.x before 17.0.10 and SeaMonkey before 2.22 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site that is visited with Internet Explorer aka \Use-After-Free Vulnerability in Microsoft Scripting Runtime Object Library.\


Use-after-free vulnerability in the nsIPresShell::GetPresContext function in the PresShell (aka presentation shell) implementation in Mozilla Firefox before 25.0 Firefox ESR 17.x before 17.0.10 and 24.x before 24.1 Thunderbird before 24.1 Thunderbird ESR 17.x before 17.0.10 and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a CANVAS element a mozTextStyle attribute and an onresize event.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux Adobe AIR before 3.9.0.1380 Adobe AIR SDK before 3.9.0.1380 and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0 Firefox ESR 24.x before 24.1 Thunderbird before 24.1 and SeaMonkey before 2.22 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X before 11.2.202.310 on Linux before 11.1.111.73 on Android 2.x and 3.x and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3361 CVE-2013-3362 and CVE-2013-3363.


The Worker::SetEventListener function in the Web workers implementation in Mozilla Firefox before 25.0 Firefox ESR 17.x before 17.0.10 and 24.x before 24.1 Thunderbird before 24.1 Thunderbird ESR 17.x before 17.0.10 and SeaMonkey before 2.22 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to direct proxies.


Use-after-free

vulnerability

in

the

nsEventListenerManager::HandleEventSubType

function

in

Mozilla

Firefox

before

Firefox

ESR

before

Thunderbird

before

and

SeaMonkey

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

vectors

related

to

mListeners

event

listeners.


Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux Adobe AIR before 3.9.0.1210 Adobe AIR SDK before 3.9.0.1210 and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-5329.


Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0 Firefox ESR 24.x before 24.2 Thunderbird before 24.2 and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement related to the RestyleManager::GetHoverGeneration function.


Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux Adobe AIR before 3.9.0.1210 Adobe AIR SDK before 3.9.0.1210 and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-5330.


Use-after-free

vulnerability

in

the

nsContentUtils::ContentIsHostIncludingDescendantOf

function

in

Mozilla

Firefox

before

Firefox

ESR

before

Thunderbird

before

and

SeaMonkey

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

vectors

involving

HTML

document

templates.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0 Thunderbird before 24.0 and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 Firefox ESR 17.x before 17.0.8 Thunderbird before 17.0.8 Thunderbird ESR 17.x before 17.0.8 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit as used in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.


Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0 Firefox ESR 17.x before 17.0.6 Thunderbird before 17.0.6 and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Use-after-free

vulnerability

in

the

mozilla::dom::HTMLMediaElement::LookupMediaElementURITable

function

in

Mozilla

Firefox

before

Firefox

ESR

before

Thunderbird

before

and

Thunderbird

ESR

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

a

crafted

web

site.


Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0 Firefox ESR 17.x before 17.0.6 Thunderbird before 17.0.6 and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Use-after-free

vulnerability

in

the

mozilla::dom::HTMLFormElement::IsDefaultSubmitElement

function

in

Mozilla

Firefox

before

Thunderbird

before

and

SeaMonkey

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

vectors

involving

a

destroyed

SELECT

element.


Use-after-free vulnerability in the nsIDocument::GetRootElement function in Mozilla Firefox before 22.0 Firefox ESR 17.x before 17.0.7 Thunderbird before 17.0.7 and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted web site.


Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0 Firefox ESR 17.x before 17.0.6 Thunderbird before 17.0.6 and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 24.0 Firefox ESR 17.x before 17.0.9 Thunderbird before 24.0 Thunderbird ESR 17.x before 17.0.9 and SeaMonkey before 2.21 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Use-after-free vulnerability in the nsINode::GetParentNode function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors involving a DOM modification at the time of a SetBody mutation event.


Adobe Digital Editions 2.x before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X before 10.3.183.75 and 11.x before 11.2.202.280 on Linux before 11.1.111.50 on Android 2.x and 3.x and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file.


Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG data in a movie file.


Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X before 10.3.183.75 and 11.x before 11.2.202.280 on Linux before 11.1.111.50 on Android 2.x and 3.x and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-1378.


Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X before 10.3.183.68 and 11.x before 11.2.202.275 on Linux before 11.1.111.44 on Android 2.x and 3.x and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.


The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24.0 Firefox ESR 17.x before 17.0.9 Thunderbird before 24.0 Thunderbird ESR 17.x before 17.0.9 and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to improperly establishing parent-child relationships of range-request nodes.


WebKit as used in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.


VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a VMware VirtualCenter 2.5 VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a VMware VI-Client 2.5 VMware ESXi 3.5 through 4.1 and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Use-after-free vulnerability in the mozilla::ResetDir function in Mozilla Firefox before 22.0 Firefox ESR 17.x before 17.0.7 Thunderbird before 17.0.7 and Thunderbird ESR 17.x before 17.0.7 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X before 10.3.183.75 and 11.x before 11.2.202.280 on Linux before 11.1.111.50 on Android 2.x and 3.x and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-1380.


Use-after-free vulnerability in the nsAnimationManager::BuildAnimations function in the Animation Manager in Mozilla Firefox before 24.0 Firefox ESR 17.x before 17.0.9 Thunderbird before 24.0 Thunderbird ESR 17.x before 17.0.9 and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving stylesheet cloning.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 22.0 Firefox ESR 17.x before 17.0.7 Thunderbird before 17.0.7 and Thunderbird ESR 17.x before 17.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Mozilla Firefox before 18.0 Firefox ESR 17.x before 17.0.2 Thunderbird before 17.0.2 Thunderbird ESR 17.x before 17.0.2 and SeaMonkey before 2.15 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XBL file with multiple bindings that have SVG content.


Use-after-free vulnerability in Mozilla Firefox before 18.0 Firefox ESR 17.x before 17.0.1 Thunderbird before 17.0.2 Thunderbird ESR 17.x before 17.0.1 and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to Mesa drivers and a resized WebGL canvas.


WebKit as used in Apple iOS before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 21.0 Firefox ESR 17.x before 17.0.6 Thunderbird before 17.0.6 and Thunderbird ESR 17.x before 17.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint function in Mozilla Firefox before 19.0 Thunderbird before 17.0.3 and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Adobe Reader and Acrobat 9.x before 9.5.3 10.x before 10.1.5 and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2012-1530 CVE-2013-0601 CVE-2013-0605 CVE-2013-0619 CVE-2013-0620 and CVE-2013-0623.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0 Firefox ESR 17.x before 17.0.3 Thunderbird before 17.0.3 Thunderbird ESR 17.x before 17.0.3 and SeaMonkey before 2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ZIP archive.


Adobe Reader and Acrobat 9.x before 9.5.3 10.x before 10.1.5 and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2012-1530 CVE-2013-0601 CVE-2013-0605 CVE-2013-0616 CVE-2013-0619 and CVE-2013-0620.


Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0 Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1 Thunderbird before 17.0.2 Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1 and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0 Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1 Thunderbird before 17.0.2 Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1 and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0 Thunderbird before 17.0.2 and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Use-after-free vulnerability in the nsPrintEngine::CommonPrint function in Mozilla Firefox before 19.0 Thunderbird before 17.0.3 and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X before 10.3.183.61 and 11.x before 11.2.202.270 on Linux before 11.1.111.43 on Android 2.x and 3.x and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-0638.


The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted print job aka \Windows Print Spooler Components Vulnerability.\


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsContentUtils::HoldJSObjects function and the nsAutoPtr class and other vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0 Firefox ESR 17.x before 17.0.1 Thunderbird before 17.0.2 Thunderbird ESR 17.x before 17.0.1 and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QTIF file.


Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X before 10.3.183.51 and 11.x before 11.2.202.262 on Linux before 11.1.111.32 on Android 2.x and 3.x and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content as exploited in the wild in February 2013.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 Firefox ESR 17.x before 17.0.5 Thunderbird before 17.0.5 Thunderbird ESR 17.x before 17.0.5 and SeaMonkey before 2.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0 Firefox ESR 17.x before 17.0.1 Thunderbird before 17.0.2 Thunderbird ESR 17.x before 17.0.1 and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


Adobe Reader and Acrobat 9.x before 9.5.3 10.x before 10.1.5 and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2012-1530 CVE-2013-0601 CVE-2013-0616 CVE-2013-0619 CVE-2013-0620 and CVE-2013-0623.


Unspecified vulnerability in the browser engine in Mozilla Firefox before 20.0 on Android allows remote attackers to cause a denial of service (stack memory corruption and application crash) or possibly execute arbitrary code via unknown vectors involving a plug-in.


Adobe Reader and Acrobat 9.x before 9.5.3 10.x before 10.1.5 and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2012-1530 CVE-2013-0605 CVE-2013-0616 CVE-2013-0619 CVE-2013-0620 and CVE-2013-0623.


Adobe Reader and Acrobat 9.x before 9.5.3 10.x before 10.1.5 and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2012-1530 CVE-2013-0601 CVE-2013-0605 CVE-2013-0616 CVE-2013-0620 and CVE-2013-0623.


WebKit as used in Apple iOS before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.


Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0 Firefox ESR 17.x before 17.0.3 Thunderbird before 17.0.3 Thunderbird ESR 17.x before 17.0.3 and SeaMonkey before 2.16 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document that uses Cascading Style Sheets (CSS) -moz-column-* properties.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0 Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1 Thunderbird before 17.0.2 Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1 and SeaMonkey before 2.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Reader and Acrobat 9.x before 9.5.3 10.x before 10.1.5 and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2012-1530 CVE-2013-0601 CVE-2013-0605 CVE-2013-0616 CVE-2013-0619 and CVE-2013-0623.


Use-after-free

vulnerability

in

the

TableBackgroundPainter::TableBackgroundData::Destroy

function

in

Mozilla

Firefox

before

Firefox

ESR

before

and

before

Thunderbird

before

Thunderbird

ESR

before

and

before

and

SeaMonkey

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

an

HTML

document

with

a

table

containing

many

columns

and

column

groups.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0 Thunderbird before 17.0.3 and SeaMonkey before 2.16 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X before 10.3.183.61 and 11.x before 11.2.202.270 on Linux before 11.1.111.43 on Android 2.x and 3.x and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-0647.


Adobe

Reader

and

Acrobat

before

before

and

before

allow

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Google Chrome before 27.0.1453.110 does not properly handle SSL sockets which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3352 and CVE-2013-3354.


Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site aka \Internet Explorer Memory Corruption Vulnerability \ a different vulnerability than CVE-2013-3110.


Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3359.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3334 and CVE-2013-3335.


The nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by specifying a plain file instead of a directory.


Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X before 11.2.202.297 on Linux before 11.1.111.64 on Android 2.x and 3.x and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3352 and CVE-2013-3355.


Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X before 11.2.202.310 on Linux before 11.1.111.73 on Android 2.x and 3.x and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3362 CVE-2013-3363 and CVE-2013-5324.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 and CVE-2013-3335.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X before 11.2.202.310 on Linux before 11.1.111.73 on Android 2.x and 3.x and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3361 CVE-2013-3362 and CVE-2013-5324.


Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3354 and CVE-2013-3355.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 and CVE-2013-3334.


Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X before 11.2.202.310 on Linux before 11.1.111.73 on Android 2.x and 3.x and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-3361 CVE-2013-3363 and CVE-2013-5324.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X before 10.3.183.86 and 11.x before 11.2.202.285 on Linux before 11.1.111.54 on Android 2.x and 3.x and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2013-2728 CVE-2013-3324 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 and CVE-2013-3335.


Adobe

Reader

and

Acrobat

before

before

and

before

allow

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

unspecified

vectors

a

different

vulnerability

than

and


Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X before 10.3.183.90 and 11.x before 11.2.202.291 on Linux before 11.1.111.59 on Android 2.x and 3.x and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Parsers in the open source project RCDCAP before 1.0.5 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via specially crafted packets.


Unspecified vulnerability in WebCore in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via unknown vectors related to browser history which triggers memory corruption.


Unspecified vulnerability in ColorSync in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via an image with a crafted ColorSync profile which triggers memory corruption.


Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (system shutdown) or execute arbitrary code via a disk image with crafted GUID partition maps which triggers memory corruption.


Unspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted feed: URL that triggers memory corruption.


Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted .XLS file that triggers memory corruption in the Microsoft Office Spotlight Importer.


Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4 Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4 and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.


Multiple unspecified vulnerabilities in Apple Safari for Windows allow remote attackers to cause a denial of service or execute arbitrary code possibly involving memory corruption and a different issue from CVE-2007-3185 and CVE-2007-3186. NOTE: as of 20070612 the original disclosure has no actionable information. However since it is from a well-known researcher it is being assigned a CVE identifier for tracking purposes.


The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter probably related to memory corruption or an invalid read on win32 platforms and possibly related to lack of initialization for a glob structure.


IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests which triggers memory corruption or other invalid memory access. NOTE: this might be the same issue as CVE-2008-0698.


The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments which result in memory corruption a different vulnerability than CVE-2006-6076.


Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file which results in memory corruption when processing cursors animated cursors and icons a similar issue to CVE-2005-0416 as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so then use CVE-2007-0038 instead of this identifier.


The InternalUnpackBits function in Apple QuickDraw as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT file that triggers memory corruption in the _GetSrcBits32ARGB function. NOTE: this issue might overlap CVE-2007-0462.


The _GetSrcBits32ARGB function in Apple QuickDraw as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PICT image with a malformed Alpha RGB (ARGB) record which triggers memory corruption.


Unspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RAW image that triggers memory corruption.


Unspecified vulnerability in the kernel in Microsoft Windows XP SP2 Server 2003 and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption aka \Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability.\


Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000 and cause a denial of service on Word 2003 via unknown attack vectors that trigger memory corruption as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X a different issue than CVE-2006-6456 CVE-2006-5994 and CVE-2006-6561.


The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2 Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption.


Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-8445 CVE-2014-8446 CVE-2014-8447 CVE-2014-8456 CVE-2014-8458 CVE-2014-8459 and CVE-2014-8461.


Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0587.


Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-8446 CVE-2014-8447 CVE-2014-8456 CVE-2014-8458 CVE-2014-8459 CVE-2014-8461 and CVE-2014-9158.


Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux Adobe AIR before 15.0.0.356 Adobe AIR SDK before 15.0.0.356 and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0576 CVE-2014-0581 and CVE-2014-8440.


Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-8445 CVE-2014-8446 CVE-2014-8447 CVE-2014-8456 CVE-2014-8458 CVE-2014-8461 and CVE-2014-9158.


Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux Adobe AIR before 15.0.0.356 Adobe AIR SDK before 15.0.0.356 and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0576 CVE-2014-0581 and CVE-2014-8441.


Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-8445 CVE-2014-8446 CVE-2014-8447 CVE-2014-8456 CVE-2014-8459 CVE-2014-8461 and CVE-2014-9158.


Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-8445 CVE-2014-8446 CVE-2014-8447 CVE-2014-8456 CVE-2014-8458 CVE-2014-8459 and CVE-2014-9158.


Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-8445 CVE-2014-8447 CVE-2014-8456 CVE-2014-8458 CVE-2014-8459 CVE-2014-8461 and CVE-2014-9158.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 Firefox ESR 31.x before 31.4 Thunderbird before 31.4 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-8445 CVE-2014-8446 CVE-2014-8447 CVE-2014-8458 CVE-2014-8459 CVE-2014-8461 and CVE-2014-9158.


Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-8445 CVE-2014-8446 CVE-2014-8456 CVE-2014-8458 CVE-2014-8459 CVE-2014-8461 and CVE-2014-9158.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted embedded font in a (1) .doc or (2) .docx document aka \Embedded Font Vulnerability.\


msdia.dll in Microsoft Debug Interface Access (DIA) SDK as distributed in Microsoft Visual Studio before 2013 does not properly validate an unspecified variable before use in calculating a dynamic-call address which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.


The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34 5.5.x before 5.5.18 and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.


WebKit as used in Apple iOS before 7.1.2 Apple Safari before 6.1.5 and 7.x before 7.0.5 and Apple TV before 6.1.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1 APPLE-SA-2014-06-30-3 and APPLE-SA-2014-06-30-4.


WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1289 CVE-2014-1291 CVE-2014-1292 CVE-2014-1293 and CVE-2014-1294.


WebKit as used in Apple Safari before 6.1.4 and 7.x before 7.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.


WebKit as used in Apple Safari before 6.1.3 and 7.x before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1.


Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function as exploited in the wild in April 2014. NOTE: this issue originally emphasized VGX.DLL but Microsoft clarified that \VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate effective workaround to help block known attacks.\


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in js/src/jit/MIR.h and stack alignment in js/src/jit/AsmJS.cpp in OdinMonkey and unknown other vectors.


WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1289 CVE-2014-1290 CVE-2014-1291 CVE-2014-1292 and CVE-2014-1293.


Use-after-free

vulnerability

in

the

nsGenericHTMLElement::GetWidthHeightForImage

function

in

Mozilla

Firefox

before

Firefox

ESR

before

Thunderbird

before

and

SeaMonkey

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

vectors

involving

an

imgLoader

object

that

is

not

properly

handled

during

an

image-resize

operation.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 Firefox ESR 31.x before 31.1 and Thunderbird 31.x before 31.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 Firefox ESR 24.x before 24.5 Thunderbird before 24.5 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Unspecified vulnerability in the browser engine in Mozilla Firefox before 32.0 Firefox ESR 24.x before 24.8 and 31.x before 31.1 and Thunderbird 24.x before 24.8 and 31.x before 31.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 does not properly perform garbage collection for Text Track Manager variables which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and heap memory corruption) via a crafted VIDEO element in an HTML document.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 Firefox ESR 31.x before 31.3 Thunderbird before 31.3 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit as used in Apple Safari before 6.1.2 and 7.x before 7.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1268 and CVE-2014-1270.


WebKit as used in Apple Safari before 6.1.6 and 7.x before 7.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in HT6367.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 Firefox ESR 24.x before 24.7 and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014. NOTE: the original disclosure referred to triggering a kernel bug with the Internet Explorer exploit payload but this ID is not for a kernel vulnerability.


WebKit as used in Apple iOS before 7.1.2 Apple Safari before 6.1.5 and 7.x before 7.0.5 and Apple TV before 6.1.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1 APPLE-SA-2014-06-30-3 and APPLE-SA-2014-06-30-4.


WebKit as used in Apple Safari before 6.1.2 and 7.x before 7.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1269 and CVE-2014-1270.


WebKit as used in Apple Safari before 6.1.2 and 7.x before 7.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1268 and CVE-2014-1269.


WebKit as used in Apple Safari before 6.1.4 and 7.x before 7.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.


WebKit as used in Apple Safari before 6.1.3 and 7.x before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1.


Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0 Firefox ESR 24.x before 24.6 and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.


WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1289 CVE-2014-1290 CVE-2014-1292 CVE-2014-1293 and CVE-2014-1294.


WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1290 CVE-2014-1291 CVE-2014-1292 CVE-2014-1293 and CVE-2014-1294.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0 and SeaMonkey before 2.26 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0 Firefox ESR 31.x before 31.1 and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an SVG animation with DOM interaction that triggers incorrect cycle collection.