CWE-824: Access of Uninitialized Pointer
The product accesses or uses a pointer that has not been initialized.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- gnuplotAn uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1...7.8 High
- php, opensuse +1 moreThe phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreAdobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X...8.8 High
- microsoft officeMicrosoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a...8.8 High
- mozilla firefox, thunderbird, opensuse evergreen +1 more +3 moreMozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do...4.3 Medium
- google chromeGoogle Chrome before 12.0.742.91 attempts to read data from an uninitialized pointer, which...5.8 Medium
- google chrome, chrome os +1 moreGoogle Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with...7.5 High
- apple quicktimeThe IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8,...9.3 High
- linux kernelThe load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux...7.8 High
- openexr, apple mac os x, canonical ubuntu linux +3 more +5 moreThe decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1...6.8 Medium
- gnu gnutlslib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA...4.3 Medium
- mit kerberos 5, apple mac os x, canonical ubuntu linux +6 more +8 moreThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...10.0 High
- libpng, apple iphone os, mac os x +6 more +8 moreThe PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in...6.8 Medium
- apple mac os xCoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service ...6.8 Medium
- mit kerberos 5, fedoraproject fedora +1 moreThe kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos...8.5 High
- enterprisedb postgres advanced serverEnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that...6.5 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +2 moreThe gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...10.0 High
- microsoft windows 2000The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges...7.2 High
- sun java system directory server, one directory server +1 moreThe LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE...7.8 High
- mit kerberos 5, canonical ubuntu linux +1 moreThe RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...9.3 High
- freebsdThe ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service ...5.0 Medium
- openldapldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when...5.0 Medium