123 matches found
CVE-2018-1528
IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290...
CVE-2018-1528
IBM Maximo Asset Management 7.6 (core) is affected by CVE-2018-1528, allowing an authenticated user to obtain sensitive information via the WhoAmI API, with CVSSv3 base score 4.3 (LOW to MEDIUM range depending on vector). The IBM Security Bulletin lists affected versions (7.6 and all dependent IB...
CVE-2016-1528: FFmpeg libavcodec library buffer overflow
CVE-2016-1528 concerns FFmpeg’s libavcodec with a heap-based buffer overflow caused by improper bounds checking. By convincing a victim to open a specially crafted file, an attacker could overflow a buffer and execute arbitrary code or cause a denial of service. The initial document describes the...
CVE-2015-1528
Integer overflow in the nativehandlecreate function in libcutils/nativehandle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service Binder heap memory corruption via a crafted application, aka internal bug 19334482...
CVE-2015-1528
CVE-2015-1528 is an Android local vulnerability: integer overflow in libcutils/native_handle.c:native_handle_create can allow a crafted app to escalate privileges or trigger Binder heap memory corruption (DoS) on Android versions prior to 5.1.1 LMY48M. The issue is tied to internal bug 19334482. ...
Android-libcutils library integer overflow leading to heap damage vulnerability discovery and exploit-vulnerability warning-the black bar safety net
Before reading this article, you best understand the Android Binder mechanism, for graphics system BufferQueue principle, the heap Manager jemalloc the basic principles. This article describes how to use the libcutils library stack damage vulnerability get systemserver permissions, this...
openSUSE Security Update : krb5 (openSUSE-SU-2011:1169-1)
The following issues have been fixed : - CVE-2011-1528: In releases krb5-1.8 and later, the KDC can crash due to an assertion failure. - CVE-2011-1529: In releases krb5-1.8 and later, the KDC can crash due to a NULL pointer dereference. Both bugs could be triggered by unauthenticated remote...
openSUSE Security Update : krb5 (openSUSE-SU-2011:1169-1)
The following issues have been fixed : - CVE-2011-1528: In releases krb5-1.8 and later, the KDC can crash due to an assertion failure. - CVE-2011-1529: In releases krb5-1.8 and later, the KDC can crash due to a NULL pointer dereference. Both bugs could be triggered by unauthenticated remote...
SeaMonkey < 2.26 Multiple Vulnerabilities
Binary data 8214.prm...
Ubuntu Update for firefox USN-2185-1
Check for the Version of firefox OpenVAS Vulnerability Test $Id: gbubuntuUSN21851.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for firefox USN-2185-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...
CVE-2014-1528
CVE-2014-1528 affects Cairo/Pixman used by Firefox 28.0 and SeaMonkey 2.25 on Windows. The vulnerability is in sse2_composite_src_x888_8888 and is an out-of-bounds write, which the initial description states can enable remote arbitrary code execution or cause a denial of service (application cras...
Fedora 19 : firefox-27.0-1.fc19 / xulrunner-27.0-1.fc19 (2014-2051)
See following page for changes: http://www.mozilla.org/en-US/firefox/27.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...
Oracle Linux 6 : krb5 (ELSA-2011-1379)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1379 advisory. 1.9-9.2 - apply upstream patch to fix a null pointer derference with the LDAP kdb backend CVE-2011-1527, an assertion failure with multiple kdb backend...
CVE-2013-1528
Unspecified vulnerability in the Oracle HRMS component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Payroll...
CVE-2013-1528
CVE-2013-1528 affects Oracle E-Business Suite HRMS (Oracle HRMS) components: 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3. The vulnerability is described as unspecified, enabling remote attackers to impact integrity via unknown vectors related to Payroll. The associated CVSS v2 metrics indicate a ne...
MS12-072: Vulnerabilities in Windows Shell Could Allow Remote Code Execution (2727528)
The version of Windows on the remote host is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the system by causing a user to browse to a specially crafted briefcase in Windows Explorer. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2012-1528
Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted briefcase, aka "Windows...
CVE-2012-1528
CVE-2012-1528 is a Windows Shell vulnerability originating from an integer overflow in the Briefcase feature. The flaw affects multiple Windows client/server platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008/R2 SP, Windows 7 SP1, Windows 8, Server 2012) and can let local users gain p...
Microsoft Windows Briefcase Integer Underflow (MS12-072; CVE-2012-1527; CVE-2012-1528)
A remote code execution vulnerability has been reported in Microsoft Windows...
Microsoft Windows Briefcase CVE-2012-1528 Integer Overflow Remote Code Execution Vulnerability
Description Microsoft Windows Briefcase is prone to a a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed attempts may trigger a denial-of-service condition. Technologies...