null pointer dereference vulnerabilities and exploits

(subscribe to this query)

Firefly Media Server 1.0.0.1359 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a (1) crafted Connection HTTP header; a return carriage control character in the (2) Accept Language header, (3) User-agent header, (4) Host header, or (5) pr...

Fireflymediaserver Firefly Media Server 1.0.0.1359

1 EDB exploit

The ModSecurity module prior to 2.7.4 for the Apache HTTP Server allows remote malicious users to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.

Trustwave Modsecurity Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.3

1 EDB exploit

The bdisk.sys driver in COMODO Backup prior to 4.4.1.23 allows remote malicious users to gain privileges via a crafted device handle, which triggers a NULL pointer dereference.

1 EDB exploit

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2019 (server Core Installation)Microsoft Windows 10 Version 21h1 Microsoft Windows Server 2022 Microsoft Windows 10 Version 20h2 Microsoft Windows 11 Version 21h2 Microsoft Windows 10 Version 21h2 Microsoft Windows 11 Version 22h2 Microsoft Windows 10 Version 22h2 Microsoft Windows 10 Version 1507 Microsoft Windows 10 Version 1607

Mesa 23.0.4 exists to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.

asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the malicious user to cause a denial of service via a crafted file.

Nasm Netwide Assembler Nasm Netwide Assembler 2.14 Nasm Netwide Assembler 2.14.0

1 EDB exploit

K7RKScan.sys in K7 Ultimate Security prior to 17.0.2019 allows local users to cause a denial of service (BSOD) because of a NULL pointer dereference.

K7computing K7 Ultimate Security

1 Github repository

FireFly Mediaserver version 1.0.0.1359 suffers from a denial of service vulnerability that can be triggered by a NULL pointer dereference.

The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent malicious users to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.

2 EDB exploits

TP-Link NC200 up to and including 2.1.8_Build_171109, NC210 up to and including 1.0.9_Build_171214, NC220 up to and including 1.3.0_Build_180105, NC230 up to and including 1.3.0_Build_171205, NC250 up to and including 1.3.0_Build_171205, NC260 up to and including 1.5.1_Build_1908...

Tp-link Nc450 Firmware 1.1.1 Tp-link Nc450 Firmware 1.1.2 Tp-link Nc450 Firmware 1.1.6 Tp-link Nc450 Firmware 1.5.0 Tp-link Nc260 Firmware 1.0.5 Tp-link Nc260 Firmware 1.0.6 Tp-link Nc260 Firmware 1.5.1 Tp-link Nc250 Firmware 1.3.0 Tp-link Nc230 Firmware 1.3.0 Tp-link Nc220 Firmware 1.1.12 Tp-link Nc220 Firmware 1.1.14 Tp-link Nc220 Firmware 1.2.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook