CVE-2017-2477

CVE-2017-2477 affects Apple macOS (Sierra) before 10.12.4 via the libxslt component. The issue is a memory corruption vulnerability that could allow a remote attacker to cause a denial of service or other impact via unknown vectors. Public details indicate this is addressed by macOS 10.12.4 (Secu...

Mac OS X Multiple Vulnerabilities (Security Update 2017-001

The remote host is running a version of Mac OS X 10.10.5 or 10.11.6 that is missing a security update. It is therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the LibreSSL component due to a flaw in the ECDSA implementation that is triggered whe...

buscape.com.br XSS vulnerability

Vulnerable URL: http://www.buscape.com.br/ssl/usuario/login-unico?redireciona=";alertOPENBUGBOUNTY;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2477 VIP website status:| Yes...

CVE-2016-2477

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

UBUNTU-CVE-2016-2477

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

CVE-2016-2477

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

CVE-2016-2477

CVE-2016-2477 is an Android Mediaserver privilege-escalation vulnerability caused by mishandled pointers in mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp. A local attacker could exploit a crafted file or payload to gain Signature or SignatureOrSystem privileges. Affected Android versions inclu...

CVE-2015-2477

Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-2477

CVE-2015-2477 affects Microsoft Office products including Office 2007 SP3, Office for Mac 2011/2016, and Word Viewer. The issue is a memory‑corruption vulnerability triggered by a crafted document, enabling a remote attacker to execute arbitrary code with the caller’s privileges. Impact is descri...

MS15-081: Vulnerability in Microsoft Office Could Allow Remote Code Execution (3072620) (Mac OS X)

The remote Mac OS X host has a version of Microsoft Office installed that is affected by multiple remote code execution vulnerabilities : - Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by...

MS15-081: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3080790)

The remote Windows host has a version of Microsoft Office, Word, Word Viewer, Excel, PowerPoint, Visio, SharePoint Server, Microsoft Office Compatibility Pack, Microsoft Word Web Apps, or Microsoft Office Web Apps installed that is affected by multiple remote code execution vulnerabilities : -...

Microsoft Office Word Viewer Multiple Remote Code Execution Vulnerabilities (3080790)

This host is missing an important security update according to Microsoft Bulletin MS15-081. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ubuntu 14.04 LTS : libevent vulnerability (USN-2477-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2477-1 advisory. Andrew Bartlett discovered that libevent incorrectly handled large inputs to the evbuffer API. A remote attacker could possibly use this issue with an application...

USN-2477-1 libevent vulnerability

Andrew Bartlett discovered that libevent incorrectly handled large inputs to the evbuffer API. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code...

CVE-2014-2477

creationtimestamp| type| source ---|---|--- 2014-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34333 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/virtualboxguestadditions.rb 2025-02-06...

Oracle VM VirtualBox Guest Additions 4.3.10r93012 - 'VBoxGuest.sys' Local Privilege Escalation (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/local/windowskernel' require 'rex' class Metasploit3 'VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation',...

VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/local/windowskernel' require 'rex' class Metasploit3 'VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation',...

KL-001-2014-001 : Oracle VirtualBox Guest Additions Arbitrary Write Privilege Escalation

Title: Oracle VirtualBox Guest Additions Arbitrary Write Privilege Escalation Advisory ID: KL-001-2014-001 Publication Date: 07.15.2014 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-001.txt 1. Vulnerability Details Affected Vendor: Oracle Affected Product: VirtualBox...

Immunity Canvas: VBOX_GUEST

Name| vboxguest ---|--- CVE| CVE-2014-2477 Exploit Pack| CANVAS Description| VBoxGuest.sys Privilege Escalation Notes| References: https://www.korelogic.com/Resources/Advisories/KL-001-2014-001.txt CVE Name: CVE-2014-2477 Notes: Exploit has been tested successfully on: - Windows XP Professional...

CVE-2014-2477

CVE-2014-2477 targets Oracle VirtualBox (before 3.2.24, 4.0.26, 4.1.34, 4.2.26, 4.3.12). It is described as an unspecified local vulnerability in the VirtualBox Core, with unknown vectors. Connected sources indicate a VBoxGuest.sys Privilege Escalation via the Guest Additions driver (e.g., exploi...