SWFTools Address Access Exception Vulnerability (CNVD-2017-37275)

SWFTools is a suite of open source software tools for creating and manipulating SWF files. An address access exception vulnerability exists in SWFTools in pdf2swf. FoFiTrueType::writeTTF. An attacker could exploit this vulnerability to cause a denial of service...

ads.fdhs.cz Open Redirect vulnerability

Open Bug Bounty ID: OBB-407630 Description| Value ---|--- Affected Website:| ads.fdhs.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Microsoft Windows Search Remote Code Execution Vulnerability (CNVD-2017-30516)

Microsoft Windows is a popular operating system. A remote code execution vulnerability exists in Microsoft Windows Search, which allows an attacker to submit a special request to execute arbitrary code in the system context...

Apple iOS Wi-Fi Component Arbitrary Code Execution Vulnerability (CNVD-2017-32732)

Apple iOS is an operating system for Apple smart devices. A security vulnerability in the Wi-Fi component of Apple iOS allows remote attackers to exploit the vulnerability to execute arbitrary code...

STDU Viewer Buffer Overflow Vulnerability (CNVD-2017-30320)

STDU Viewer is a free file viewer that supports multiple formats. The program supports TIFF, PDF, DjVu, XPS and WWF formats. A buffer overflow vulnerability exists in STDU Viewer version 1.6.375. A local attacker can exploit this vulnerability to cause a denial of service with the help of a...

UBUNTU-CVE-2017-0786

A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2017-31353)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. An information disclosure vulnerability exists in the Android Media framework. An attacker can exploit thi...

DEBIAN-CVE-2017-14165

The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c...

Microsoft Windows CLFS Local Elevation of Privilege Vulnerability (CNVD-2017-28000)

Microsoft Windows is the popular operating system. A security vulnerability in the Microsoft Windows CLFS handling of memory objects allows an attacker to exploit the vulnerability to submit special requests that can elevate privileges...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-25777)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it could crash the application or execute arbitrary code...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-26608)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader memory corruption vulnerability exists. Remote attackers can...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2017-21200)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An information disclosure vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2017-21761)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

BELL-CVE-2017-9789 CVE-2017-9789 does not affect BellSoft software

Bulletin has no description...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14451)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle in-memory objects, and a remote code execution vulnerability exists in the scripting engine presentation, where an attacker could execute arbitrary code in the current user context...

Google Android media framework denial of service vulnerability (CNVD-2017-15974)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework in Android. A remote attacker can exploit this...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-13532)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An unauthorized operation vulnerability exists in the Qualcomm component in Android. An attacker...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-12945)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component of Android. An attacker could exploit the...

Google Android has an unspecified vulnerability (CNVD-2017-13232)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. An attacker can exploit the vulnerability to perform unauthorized operations...

Google Android Unauthorized Operation Vulnerability (CNVD-2017-11471)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. An attacker can exploit the vulnerability to perform unauthorized operations...