104 matches found
CentOS 7 : advancecomp (RHSA-2020:1037)
The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1037 advisory. - In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to...
Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2020-1037)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-1037
An elevation of privilege vulnerability exists in the way Windows Error Reporting WER handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'...
CVE-2019-1037
An elevation of privilege vulnerability exists in the way Windows Error Reporting WER handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'...
CVE-2019-1037
Technical details (affected products, vulnerable component, versions, impact, or exploit information) for CVE-2019-1037 are not publicly provided in the connected documents. Please monitor for updates as more information becomes available.
Microsoft Windows Error Reporting CVE-2019-1037 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Window...
Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2018-1037) (Spectre)
An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...
Amazon Linux 2 : java-1.7.0-openjdk (ALAS-2018-1037) (Spectre)
An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...
Microsoft Visual Studio 2012 Update 5 Information Disclosure Vulnerability (KB4089501)
This host is missing an important security update according to Microsoft KB4089501. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Microsoft Visual Studio 2013 Update 5 Information Disclosure Vulnerability (KB4089283)
This host is missing an important security update according to Microsoft KB4089283 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Visual Studio 2015 Update 3 Information Disclosure Vulnerability (KB4087371)
This host is missing an important security update according to Microsoft KB4091346 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Visual Studio 2010 Service Pack 1 Information Disclosure Vulnerability (KB4091346)
This host is missing an important security update according to Microsoft KB4091346 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2018-1037
CVE-2018-1037 affects Microsoft Visual Studio family. The vulnerability is an information disclosure caused by improper handling of uninitialized memory when compiling Program Database (PDB) files, allowing disclosure of limited memory contents. The NVD entry lists CVSSv3 base score 4.3 (Medium),...
Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: April 12, 2018
Description of the security update for the information disclosure vulnerability in Visual Studio 2012 Update 5: April 12, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...
Description of the security update for the information disclosure vulnerability in Visual Studio 2013 Update 5: April 10, 2018
None None...
Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: April 10, 2018
Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: April 10, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...
KLA11226 OSI vulnerability in Microsoft Developer Tools
An information disclosure vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2018-1037 Related products Microsoft-Visual-Studio CVE list CVE-2018-1037 warning KB list 4089501 4087371 4091346...
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Adobe Reader Security Updates (APSB16-14) - Windows
Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
Adobe Reader Security Updates (APSB16-14) - Mac OS X
Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...