Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to improper interaction between threading and garbage collection in the GCRuntime::triggerGC function in js/src/jsgc.cpp and unknown other vectors.


WebKit as used in Apple Safari before 6.1.6 and 7.x before 7.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in HT6367.

denial of service
memory corruption
arbitrary code execution


WebKit as used in Apple Safari before 6.1.4 and 7.x before 7.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.


usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 Office 2007 SP3 and 2010 SP1 and SP2 Live Meeting 2007 Console Lync 2010 and 2013 Lync 2010 Attendee and Lync Basic 2013 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EMF+ record in a font file aka \Unicode Scripts Processor Vulnerability.\


USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 Firefox ESR 24.x before 24.3 Thunderbird before 24.3 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit as used in Apple Safari before 6.1.3 and 7.x before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1.


Microsoft Word 2003 SP3 2007 SP3 2010 SP1 and SP2 2013 and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data as exploited in the wild in March 2014.


Use-after-free

vulnerability

in

the

nsEventListenerManager::CompileEventHandlerInternal

function

in

the

Event

Listener

Manager

in

Mozilla

Firefox

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

crafted

web

content.


Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file.


WebKit as used in Apple iOS before 7.1.2 Apple Safari before 6.1.5 and 7.x before 7.0.5 and Apple TV before 6.1.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1 APPLE-SA-2014-06-30-3 and APPLE-SA-2014-06-30-4.


The IRQ setup in Xen 4.2.x and 4.3.x when using device passthrough and configured to support a large number of CPUs frees certain memory that may still be intended for use which allows local guest administrators to cause a denial of service (memory corruption and hypervisor crash) and possibly execute arbitrary code via vectors related to an out-of-memory error that triggers a (1) use-after-free or (2) double free.


WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1289 CVE-2014-1290 CVE-2014-1291 CVE-2014-1292 and CVE-2014-1294.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Use-after-free

vulnerability

in

the

nsHostResolver::ConditionallyRefreshRecord

function

in

libxul.so

in

Mozilla

Firefox

before

Firefox

ESR

before

Thunderbird

before

and

SeaMonkey

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

vectors

related

to

host

resolution.


Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by leveraging incorrect Web Audio control-message ordering.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with RLE encoding.


WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-1289 CVE-2014-1290 CVE-2014-1291 CVE-2014-1293 and CVE-2014-1294.


WebKit as used in Apple Safari before 6.1.4 and 7.x before 7.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 Firefox ESR 24.x before 24.4 Thunderbird before 24.4 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0 Firefox ESR 24.x before 24.6 and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit as used in Apple Safari before 6.1.6 and 7.x before 7.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in HT6367.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 Firefox ESR 31.x before 31.2 and Thunderbird 31.x before 31.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit as used in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-06-30-1.


WebKit as used in Apple Safari before 6.1.3 and 7.x before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-04-01-1.


Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0 Firefox ESR 24.x before 24.6 and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted web content.


Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux Adobe AIR before 15.0.0.356 Adobe AIR SDK before 15.0.0.356 and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0581 CVE-2014-8440 and CVE-2014-8441.


Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android Adobe AIR SDK before 15.0.0.249 and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 CVE-2014-0552 and CVE-2014-0555.


Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-9164.


Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android Adobe AIR SDK before 15.0.0.249 and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0547 CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 and CVE-2014-0555.


Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.


The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSiteProperties3 methods which triggers a dereference of an arbitrary memory address. NOTE: this issue was MERGED with CVE-2014-0606 because it is the same type of vulnerability affecting the same set of versions and discovered by the same researcher.


Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0522 CVE-2014-0523 and CVE-2014-0526.


Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android Adobe AIR SDK before 15.0.0.249 and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0547 CVE-2014-0549 CVE-2014-0551 CVE-2014-0552 and CVE-2014-0555.


Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux Adobe AIR before 14.0.0.110 Adobe AIR SDK before 14.0.0.110 and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux Adobe AIR before 15.0.0.293 Adobe AIR SDK before 15.0.0.302 and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0564.


Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0523 CVE-2014-0524 and CVE-2014-0526.


Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0522 CVE-2014-0523 and CVE-2014-0524.


Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0522 CVE-2014-0524 and CVE-2014-0526.


Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux Adobe AIR before 15.0.0.356 Adobe AIR SDK before 15.0.0.356 and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0576 CVE-2014-8440 and CVE-2014-8441.


Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android Adobe AIR SDK before 15.0.0.249 and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0547 CVE-2014-0549 CVE-2014-0550 CVE-2014-0552 and CVE-2014-0555.


Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android Adobe AIR SDK before 15.0.0.249 and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0547 CVE-2014-0550 CVE-2014-0551 CVE-2014-0552 and CVE-2014-0555.


Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux Adobe AIR before 15.0.0.293 Adobe AIR SDK before 15.0.0.302 and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0558.


Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android Adobe AIR SDK before 15.0.0.249 and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-0547 CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 and CVE-2014-0552.


WebKit as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-4452.


WebKit as used in Apple Safari before 6.2.1 7.x before 7.1.1 and 8.x before 8.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-12-2-1.


WebKit as used in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and APPLE-SA-2014-09-17-2.


WebKit as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3 7.x before 7.1.3 and 8.x before 8.0.3; and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-4477 and CVE-2014-4479.


WebKit as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3 7.x before 7.1.3 and 8.x before 8.0.3; and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-4476 and CVE-2014-4479.


WebKit as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-4462.


wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted packet-trace file that includes a large packet.


Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via network traffic that appears to come from an intended acceptor but specifies a security mechanism different from the one proposed by the initiator.


WebKit as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3 7.x before 7.1.3 and 8.x before 8.0.3; and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2014-4476 and CVE-2014-4477.


Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version number and flags in an mvhd atom.


The get_option function in dhcp.c in dhcpcd before 6.2.0 as used in dhcpcd 5.x in Android before 5.1 and other products does not validate the relationship between length fields and the amount of data which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a large length value of an option in a DHCPACK message.


The print_option function in dhcp-common.c in dhcpcd through 6.9.1 as used in dhcp.c in dhcpcd 5.x in Android before 5.1 and other products misinterprets the return value of the snprintf function which allows remote DHCP servers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted message.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted FlashPix file.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11 Thunderbird before 3.0.9 and 3.1.x before 3.1.5 and SeaMonkey before 2.0.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2890 CVE-2010-3619 CVE-2010-3621 CVE-2010-3622 CVE-2010-3628 and CVE-2010-3632.


Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2890 CVE-2010-3619 CVE-2010-3621 CVE-2010-3628 CVE-2010-3632 and CVE-2010-3658.


Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content as exploited in the wild in October 2010.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 and CVE-2010-3652.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2890 CVE-2010-3619 CVE-2010-3621 CVE-2010-3622 CVE-2010-3628 and CVE-2010-3658.


WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows and before 4.1.3 on Mac OS X 10.4 does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5 poppler 0.8.7 and possibly other versions up to 0.15.1 kdegraphics and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index which bypasses input validation and triggers memory corruption.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3650 and CVE-2010-3652.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13 Thunderbird before 3.0.11 and 3.1.x before 3.1.7 and SeaMonkey before 2.0.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16 Thunderbird before 3.0.11 and SeaMonkey before 2.0.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset as exploited in the wild in October 2010. NOTE: some of these details are obtained from third party information.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9 Thunderbird before 3.0.7 and 3.1.x before 3.1.3 and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2890 CVE-2010-3619 CVE-2010-3622 CVE-2010-3628 CVE-2010-3632 and CVE-2010-3658.


LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 and CVE-2010-3652.


Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 Thunderbird before 3.0.9 and SeaMonkey before 2.0.9 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted FlashPix image in an Office document aka \FlashPix Image Converter Heap Corruption Vulnerability.\


QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file that causes an image sample transformation to scale a sprite outside a buffer boundary.


Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows Mac OS X Linux and Solaris and 10.1.95.1 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors a different vulnerability than CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 and CVE-2010-3650.


Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2890 CVE-2010-3621 CVE-2010-3622 CVE-2010-3628 CVE-2010-3632 and CVE-2010-3658.


Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2890 CVE-2010-3619 CVE-2010-3621 CVE-2010-3622 CVE-2010-3632 and CVE-2010-3658.


The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a crafted length related to the ExecuteRequest method.


Adobe Shockwave Player before 11.5.8.612 does not properly validate a count value in a Director movie which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie related to IML32X.dll and DIRAPIX.dll.


The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value as demonstrated by a value at position 0x3812 of a certain file.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors related to improper length calculation and the (1) STSC (2) STSZ and (3) STCO atoms.


Adobe Shockwave Player before 11.5.8.612 does not properly validate offset values in the rcsL RIFF chunks of (1) .DIR and (2) .DCR Director movies which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.


Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76 and Adobe AIR before 2.0.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-0209 CVE-2010-2213 and CVE-2010-2214.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 and CVE-2010-2188.


Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-1295 CVE-2010-2207 CVE-2010-2209 CVE-2010-2210 CVE-2010-2211 and CVE-2010-2212.


DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly handle a certain return value associated with the rcsL chunk in a Director movie which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie related to a \pointer offset vulnerability.\


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to handlers for DOM mutation events aka rdar problem 7948784. NOTE: this might overlap CVE-2010-1759.


Integer signedness error in the DIRAPI module in Adobe Shockwave Player before 11.5.8.612 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a count value associated with an \undocumented structure\ and the tSAC chunk in a Director movie.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


The IICAClient interface in the ICAClient library in the ICA Client ActiveX Object (aka ICO) component in Citrix Online Plug-in for Windows for XenApp & XenDesktop before 12.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document that triggers the reading of a .ICA file.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-1295 CVE-2010-2202 CVE-2010-2209 CVE-2010-2210 CVE-2010-2211 and CVE-2010-2212.


Adobe Shockwave Player before 11.5.8.612 does not properly validate values associated with buffer-size calculation for a 0xFFFFFFF8 record in a (1) .dir or (2) .dcr Director movie which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.


Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76 and Adobe AIR before 2.0.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-0209 CVE-2010-2214 and CVE-2010-2216.


The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2588 and CVE-2010-4188.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2187 and CVE-2010-2188.


IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value as demonstrated by a value at position 0x24C6 of a certain file.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9 Thunderbird before 3.0.7 and 3.1.x before 3.1.3 and SeaMonkey before 2.0.7 on Mac OS X allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted font in a data: URL.


DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a value associated with a buffer seek for a Director movie which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.


Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1 RealPlayer SP 1.0 through 1.0.1 Mac RealPlayer 11.0 through 11.1 Linux RealPlayer 11.0.2.1744 and possibly HelixPlayer 1.0.6 and other versions allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted StreamTitle tag in an ICY SHOUTcast stream related to the SMIL file format.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors related to SWF files decompression of embedded JPEG image data and the DefineBits and other unspecified tags a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-1295 CVE-2010-2202 CVE-2010-2207 CVE-2010-2210 CVE-2010-2211 and CVE-2010-2212.


layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted HTML document related to the DATA and SRC attributes of an OBJECT element. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-1214.


Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-1295 CVE-2010-2202 CVE-2010-2207 CVE-2010-2209 CVE-2010-2210 and CVE-2010-2212.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed file containing an invalid value as demonstrated by a value at position 0x320D of a certain file.


IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value as demonstrated by a value at position 0x24C0 of a certain file.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different arguments a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 and CVE-2010-2187.


dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director file containing a crafted pamm chunk with an invalid (1) size and (2) number of sub-chunks a different vulnerability than CVE-2010-4084 CVE-2010-4085 CVE-2010-4086 and CVE-2010-4088.


DIRAPIX.dll in Adobe Shockwave Player before 11.5.8.612 does not properly validate a certain chunk size in the mmap chunk in a Director movie which allows remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted movie.


Adobe Flash Player 10.1.82.76 and earlier on Windows Mac OS X Linux and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors as exploited in the wild in September 2010.


Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-1295 CVE-2010-2202 CVE-2010-2207 CVE-2010-2209 CVE-2010-2211 and CVE-2010-2212.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-2160 CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


IML32.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value as demonstrated by a value at position 0x3712 of a certain file.


DIRAPI.dll in Adobe Shockwave Player before 11.5.8.612 does not properly parse .dir files which allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a malformed file containing an invalid value as demonstrated by a value at position 0x47 of a certain file.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2 related to getouterscope a different vulnerability than CVE-2010-2165 CVE-2010-2166 CVE-2010-2171 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2180 CVE-2010-2182 CVE-2010-2184 CVE-2010-2187 and CVE-2010-2188.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 and Adobe AIR before 2.0.2.12610 when used in conjunction with VMWare Tools on a VMWare platform allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.


Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76 and Adobe AIR before 2.0.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-0209 CVE-2010-2213 and CVE-2010-2216.


pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 2003 SP3 and 2007 SP2 does not properly handle an unspecified size field in certain older file formats which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file aka \Size Value Heap Corruption in pubconv.dll Vulnerability.\


Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771.


The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2587 and CVE-2010-4188.


Adobe Reader and Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-3619 CVE-2010-3621 CVE-2010-3622 CVE-2010-3628 CVE-2010-3632 and CVE-2010-3658.


Dameng DM Database Server allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors related to the SP_DEL_BAK_EXPIRED procedure in wdm_dll.dll which triggers memory corruption.


Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation.


Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image with bzip2 compression.


Array index error in Jan Eric Kyprianidis lib3ds 1.x as used in Google SketchUp 7.x before 7.1 M2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file probably related to mesh.c.


The

browser

engine

in

Mozilla

Firefox

before

before

and

before

Thunderbird

before

and

SeaMonkey

before

allows

remote

attackers

to

cause

a

denial

of

service

(memory

corruption

and

application

crash)

and

possibly

execute

arbitrary

code

via

vectors

related

to

and

the

function

in


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2 Thunderbird before 3.0.4 and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file related to malformed MediaVideo data a sample description atom (STSD) and a crafted length value.


The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X when the Core Text API is used does not properly perform certain deletions which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters as demonstrated by the U+FEFF U+FFF9 U+FFFA and U+FFFB characters.


Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030 which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.


Adobe Reader and Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and Mac OS X allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-0194 CVE-2010-0201 and CVE-2010-0204.


Adobe Reader and Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and Mac OS X allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-0194 CVE-2010-0197 and CVE-2010-0201.


The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8 Thunderbird before 3.0.2 and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp and unspecified other vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19 3.5.x before 3.5.9 and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP image.


The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8 and SeaMonkey before 2.0.3 does not properly handle array data types for posted messages which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.


Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.


The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista Windows Server 2008 R2 and Windows 7 allows remote SMTP IMAP and POP servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via crafted data in a session that uses SSPI.


The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors involving certain indirect calls to the JavaScript eval function.


Adobe Reader and Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and Mac OS X allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-0197 CVE-2010-0201 and CVE-2010-0204.


Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76 and Adobe AIR before 2.0.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2213 CVE-2010-2214 and CVE-2010-2216.


The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted format arguments.


Adobe Reader and Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and Mac OS X allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-0194 CVE-2010-0197 and CVE-2010-0204.


Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950 as used in Google Chrome before 5.0.375.70 allows remote attackers to obtain sensitive information cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to list markers for HTML lists aka rdar problem 8009118.


WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to the rendering of an inline element.


Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2202 CVE-2010-2207 CVE-2010-2209 CVE-2010-2210 CVE-2010-2211 and CVE-2010-2212.


Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-1284 CVE-2010-1286 CVE-2010-1287 CVE-2010-1290 and CVE-2010-1291.


Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4 Thunderbird before 3.0.5 and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-1284 CVE-2010-1286 CVE-2010-1287 CVE-2010-1289 and CVE-2010-1290.


The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows and before 4.1 on Mac OS X 10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via HTML content that contains multiple :after pseudo-selectors.


WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.


js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) propagation of deep aborts in the TraceRecorder::record_JSOP_BINDNAME function (2) depth handling in the TraceRecorder::record_JSOP_GETELEM function and (3) tracing of out-of-range arguments in the TraceRecorder::record_JSOP_ARGSUB function.


iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.


The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request related to an incorrect macro definition.


Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-1286 CVE-2010-1287 CVE-2010-1289 CVE-2010-1290 and CVE-2010-1291.


WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.


The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.


Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-1284 CVE-2010-1286 CVE-2010-1287 CVE-2010-1289 and CVE-2010-1291.


WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a floating element in an SVG document.


The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data aka \ACCWIZ.dll Uninitialized Variable Vulnerability.\


Disk Images in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted UDIF image.


Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-1284 CVE-2010-1287 CVE-2010-1289 CVE-2010-1290 and CVE-2010-1291.


WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows and before 4.1 on Mac OS X 10.4 does not properly perform ordered list insertions which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document related to the insertion of an unspecified element into an editable container and the access of an uninitialized element.


WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows and before 4.1 on Mac OS X 10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an SVG document with nested use elements.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7 Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1 and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows Apple Safari before 4.1 on Mac OS X 10.4 and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element related to a \type checking issue.\


Microsoft Windows Media Player 11 does not properly perform colorspace conversion which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .AVI file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Microsoft Office Word 2002 SP3 2003 SP3 and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Word file which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file aka \Word Record Parsing Vulnerability.\


Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 Thunderbird before 3.0.5 and SeaMonkey before 2.0.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.


Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction as exploited in the wild in June 2010.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4 Thunderbird before 3.0.5 and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.


WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a use element in an SVG document.


Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors a different vulnerability than CVE-2010-1284 CVE-2010-1286 CVE-2010-1289 CVE-2010-1290 and CVE-2010-1291.


Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.


Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0555 CVE-2010-4187 CVE-2010-4190 CVE-2010-4191 CVE-2010-4192 and CVE-2010-4306.


Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0555 CVE-2010-4093 CVE-2010-4187 CVE-2010-4190 CVE-2010-4192 and CVE-2010-4306.


The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value which causes an out-of-range pointer offset.


Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2011-0555 CVE-2010-4093 CVE-2010-4187 CVE-2010-4190 CVE-2010-4191 and CVE-2010-4192.


The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1 RealPlayer SP 1.0 through 1.1.5 RealPlayer Enterprise 2.1.2 and 2.1.3 Linux RealPlayer 11.0.2.1744 and possibly HelixPlayer 1.0.6 and other versions allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.


IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry a different vulnerability than CVE-2010-4089.


dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Director (.dir) media file with an invalid element size a different vulnerability than CVE-2010-2581 CVE-2010-2880 CVE-2010-4084 CVE-2010-4085 and CVE-2010-4088.


Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted CSWV RIFF chunk that causes an incorrect calculation of an offset for a substructure which causes an out-of-bounds \seek\ of heap memory a different vulnerability than CVE-2011-0555 CVE-2010-4093 CVE-2010-4187 CVE-2010-4191 CVE-2010-4192 and CVE-2010-4306.


Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.


Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information.


WebM libvpx (aka the VP8 Codec SDK) before 0.9.5 as used in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.


The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows and VMware Server 2.x on Windows does not properly validate an unspecified size field which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.


dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2581 CVE-2010-4085 CVE-2010-4086 and CVE-2010-4088.


dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with \duplicated references to the same KEY* chunk \ a different vulnerability than CVE-2010-2581 CVE-2010-4084 CVE-2010-4085 and CVE-2010-4086.


RealNetworks RealPlayer 11.0 through 11.1 RealPlayer SP 1.0 through 1.1.4 Linux RealPlayer 11.0.2.1744 and possibly HelixPlayer 1.0.6 and other versions allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file.


Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation a different vulnerability than CVE-2011-0555 CVE-2010-4093 CVE-2010-4187 CVE-2010-4190 CVE-2010-4191 and CVE-2010-4306.


IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file containing \duplicated LCSM entries in mmap record \ a different vulnerability than CVE-2010-4087.


The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1 RealPlayer SP 1.0 through 1.1.4 Mac RealPlayer 11.0 through 12.0.0.1444 and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.


The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1 9.x before 9.4.1 and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption involving the printSeps function. NOTE: some of these details are obtained from third party information.


Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed chunk in a Director file a different vulnerability than CVE-2011-0555 CVE-2010-4093 CVE-2010-4190 CVE-2010-4191 CVE-2010-4192 and CVE-2010-4306.


dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2010-2581 CVE-2010-4084 CVE-2010-4086 and CVE-2010-4088.


Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment a different vulnerability than CVE-2008-3246 and CVE-2009-0219.


libvorbis before r16182 as used in Mozilla Firefox 3.5.x before 3.5.2 and other products allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.


The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp and unspecified other vectors.


Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment a different vulnerability than CVE-2008-3246 and CVE-2009-0219.


The

browser

engine

in

Mozilla

Firefox

before

and

Thunderbird

allows

remote

attackers

to

cause

a

denial

of

service

(memory

corruption

and

application

crash)

or

possibly

execute

arbitrary

code

via

vectors

related

to

the

frame

chain

and

synchronous

events

a

SetMayHaveFrame

assertion

and

nsCSSFrameConstructor::CreateFloatingLetterFrame

nsCSSFrameConstructor::ConstructFrame

the

child

list

and

initial

reflow

GetLastSpecialSibling

nsFrameManager::GetPrimaryFrameFor

and

MathML

nsFrame::GetBoxAscent

nsCSSFrameConstructor::AdjustParentFrame

nsDOMOfflineResourceList

and

nsContentUtils::ComparePosition.


The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp (2) JS_HashTableRawLookup and (3) MirrorWrappedNativeParent and js_LockGCThingRT.


Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.


The

nsXULTemplateQueryProcessorRDF::CheckIsSeparator

function

in

Mozilla

Firefox

before

SeaMonkey

and

Thunderbird

allows

remote

attackers

to

cause

a

denial

of

service

(memory

corruption

and

application

crash)

or

possibly

execute

arbitrary

code

via

vectors

related

to

loading

multiple

RDF

files

in

a

XUL

tree

element.


Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation.


Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file.


The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.


Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction related to (1) nsHTMLContentSink.cpp (2) nsXMLContentSink.cpp and (3) nsPresShell.cpp and the nsSubDocumentFrame::Reflow function.


AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via unspecified vectors.


Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document related to a certain pointer misinterpretation.


The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376.


Unspecified vulnerability in the browser engine in Mozilla Firefox before 3.0.16 SeaMonkey before 2.0.1 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.


Adobe Acrobat 9.x before 9.2 8.x before 8.1.7 and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2 Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp and unknown vectors.


Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name.


The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API related to putting \SQL metadata into a bad state.\


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6 SeaMonkey before 2.0.1 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6 SeaMonkey before 2.0.1 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple

unspecified

vulnerabilities

in

the

browser

engine

in

Mozilla

Firefox

before

and

before

Thunderbird

before

and

SeaMonkey

before

allow

remote

attackers

to

cause

a

denial

of

service

(memory

corruption

and

application

crash)

or

possibly

execute

arbitrary

code

via

vectors

related

to

the

BinHex

decoder

in

and

unknown

vectors.


Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.6 SeaMonkey before 2.0.1 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.


The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1 8.1.4 7.1.1 and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument.


The JavaScript garbage collector in WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an \offset of a NULL pointer.\


The JavaScript engine in Mozilla Firefox before 3.0.11 Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) js_LeaveSharpObject (2) ParseXMLSource and (3) a certain assertion in jsinterp.c; and other vectors.


The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1 8.1.4 7.1.1 and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.


WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.


Mozilla Firefox before 3.0.11 Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving \double frame construction.\


WebKit in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.


Use-after-free vulnerability in WebKit as used in Apple Safari before 4.0 iPhone OS 1.0 through 2.2.1 iPhone OS for iPod touch 1.1 through 2.2.1 Google Chrome 1.0.154.53 and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs related to \recursion in certain DOM event handlers.\


CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data.


Adobe Reader 7 and Acrobat 7 before 7.1.3 Adobe Reader 8 and Acrobat 8 before 8.1.6 and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font.


WebKit in Apple Safari before 4.0.2 as used on iPhone OS before 3.1 iPhone OS before 3.1.1 for iPod touch and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.


The browser engine in Mozilla Firefox 3 before 3.0.11 Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry related to the atom table DOM mutation events and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor related to changing the cursor; and other vectors.


Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2 and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file related to authplay.dll as exploited in the wild in July 2009.


CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers memory corruption.


The layout engine in Mozilla Firefox before 3.0.7 Thunderbird before 2.0.0.21 and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption and assertion failures.


Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file.


Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption.


The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) header which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted PDF file that triggers an invalid memory access.


Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6 Thunderbird before 2.0.0.21 and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.


The layout engine in Mozilla Firefox 2 and 3 before 3.0.7 Thunderbird before 2.0.0.21 and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode events and garbage collection which triggers memory corruption.


Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6 Thunderbird before 2.0.0.21 and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.


The JavaScript engine in Mozilla Firefox before 3.0.7 Thunderbird before 2.0.0.21 and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a splice of an array that contains \some non-set elements \ which causes jsarray.cpp to pass an incorrect argument to the ResizeSlots function which triggers memory corruption; (2) vectors related to js_DecompileValueGenerator jsopcode.cpp __defineSetter__ and watch which triggers an assertion failure or a segmentation fault; and (3) vectors related to gczeal __defineSetter__ and watch which triggers a hang.


The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) .doc (2) .wri or (3) .rtf Word 97 file that triggers memory corruption as exploited in the wild in December 2008 as demonstrated by 2008-crash.doc.rar and a similar issue to CVE-2008-4841.


The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a file that triggers memory corruption.


Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .pdf file attachment a different vulnerability than CVE-2008-3246 CVE-2009-0176 CVE-2009-0219 CVE-2009-2643 and CVE-2009-2646.


The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image which causes insufficient memory to be allocated and leads to an \invalid free.\


An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the \IOMobileFrameBuffer\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \IOSurface\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \libarchive\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted archive file.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \CFNetwork\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \Intel Graphics Driver\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \Remote Management\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \ImageIO\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the \IOKit\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \APFS\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \AppleGraphicsControl\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \HFS\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \Sandbox\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \Open Scripting Architecture\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted AppleScript file that is mishandled by osadecompile.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \Bluetooth\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.