Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

CVEs (289)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-4682 1Apple 1Mac Os X Apr 23, 2026 Nov 15, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized o...Show more CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer.Show less
CVE-2007-4000 2Fedoraproject Mit 2Fedora Kerberos 5 Apr 23, 2026 Sep 5, 2007 N/A· v4 N/A· v3 8.5 HIGH· v2 The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy doe...Show more The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.Show less
CVE-2007-4639 1Enterprisedb 1Postgres Advanced Server Apr 23, 2026 Aug 31, 2007 N/A· v4 N/A· v3 6.5 MEDIUM· v2 EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon c...Show more EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which triggers use of an uninitialized pointer.Show less
CVE-2007-2442 3Canonical DebianMit 3Debian Linux Kerberos 5Ubuntu Linux Apr 23, 2026 Jun 26, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an u...Show more The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.Show less
CVE-2007-1213 1Microsoft 1Windows 2000 Apr 23, 2026 Apr 4, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType fonts, which result in an uninitialized function pointer.
CVE-2006-4175 1Sun 2Java System Directory Server One Directory Server Apr 23, 2026 Mar 26, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malf...Show more The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.Show less
CVE-2006-6143 2Canonical Mit 2Kerberos 5 Ubuntu Linux Apr 23, 2026 Dec 31, 2006 N/A· v4 N/A· v3 9.3 HIGH· v2 The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memor...Show more The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.Show less
CVE-2006-0054 1Freebsd 1Freebsd Apr 16, 2026 Jan 11, 2006 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitiali...Show more The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action, which leads to an access of an uninitialized pointer.Show less
CVE-2003-1201 1Openldap 1Openldap Apr 16, 2026 Mar 20, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote...Show more ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).Show less

Previous 1...11 12 13 1415