PT-2016-3420 · Perl +2 · Perl +2

Name of the Vulnerable Software and Affected Versions: Perl versions prior to 5.22.3-RC2 Perl versions 5.24 prior to 5.24.1-RC2 Description: The issue is related to errors in privilege management in the Perl interpreter, specifically with the handling of the included directory array "@INC". This...

[slackware-security] gimp

New gimp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gimp-2.8.18-i586-1slack14.2.txz: Upgraded. This release fixes a security issue: Use-after-free vulnerability in the...

ActivePDF Toolkit Remote Code Execution Vulnerability

ActivePDF Toolkit is a set of scalable programmable to help users create and manage pdf files COM components. A remote code execution vulnerability exists in ActivePDF Toolkit. An attacker could use this vulnerability to execute arbitrary code in the context of the current process, which could al...

Oracle Java MethodHandles filterReturnValue Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation o...

Apple OS X ACMP4AACBaseDecoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of M...

Microsoft Windows Current Groups

Binary data microsoftwindowscurrentgroups.nbin...

Microsoft Windows Current Users

Binary data microsoftwindowscurrentusers.nbin...

Microsoft Excel Arbitrary Code Execution Vulnerability (CNVD-2016-04960)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An arbitrary code execution vulnerability exists in Microsoft Office, which stems from the program's failu...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory corruption vulnerability exists in the Chakra JavaScript engine in Microso...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-04928)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory corruption vulnerability exists in the Chakra JavaScript engine in Microso...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-04789)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge that stems from a program failing to properly access objects in memory. A remote attacker can exploit t...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Adobe Flash StyleSheet Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the StyleSheet...

Microsoft Internet Explorer CTableLayout AddRow Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

Microsoft Chakra ArrayBuffer.transfer Uninitialized Buffer Information Leak Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

Adobe Reader DC if XSLT Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Adobe Flash AdBreakPlacement Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04910)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC by means of a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context o...

Microsoft Office Web Apps Code Execution

The Microsoft Office Web Apps software package contains a vulnerability related to errors that occur due to improper processing of specially crafted files. Exploiting this vulnerability can allow an unauthorized attacker to execute arbitrary code with the privileges of the current user...

Microsoft Word Code Execution

Microsoft Word’s text editor contains a vulnerability related to errors that occur due to improper processing of specially crafted files. Exploiting this vulnerability can allow an unauthorized intruder to execute arbitrary code with privileges of the current user...