Skip to content
OpenAdvisories

Archive

March 2012

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8

    Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chr…

  • High 8.4

    win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …

  • High —
    CVE-2012-0838 EPSS 14%

    Apache Struts Code injection due to conversion error

    Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.