140 matches found
systemd DynamicUser SetUID Binary Creation
systemd: DynamicUser can create setuid binaries when assisted by another process Related CVE Numbers: CVE-2019-3844. I am sending this bug report to Ubuntu as requested by systemd at . This bug report describes a bug in systemd that allows a service with DynamicUser in collaboration with another...
Hyland Perceptive Document Filters DOCX to HTML Code Execution Vulnerability(CVE-2018-3844)
Summary An exploitable use after free exists in the DOCX to HTML conversion functionality of the Hyland Perspective Document Filters version 11.4.0.2647. A crafted DOCX document can lead to a use-after-free resulting in direct code execution. Tested Versions Perceptive Document Filters 11.4.0.264...
CVE-2018-3844
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted DOCX document can lead to a use-after-free resulting in direct code execution...
CVE-2018-3844
CVE-2018-3844 affects Hyland Perceptive Document Filters (11.4.0.2647, Windows/Linux). A crafted DOCX can trigger a use-after-free during the DOCX→HTML conversion path, enabling remote code execution. The vulnerability is rooted in a lifecycle issue where a freed object is reused (virtual call on...
Debian DSA-3844-1 : tiff - security update
Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service, memory disclosure or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
CVE-2017-3844
Cisco Prime Collaboration Assurance contains a directory listing vulnerability (CVE-2017-3844) that could allow an authenticated remote attacker to enumerate and download files via crafted HTTP requests. Affected firmware: PCP versions 11.0, 11.1, and 11.5 (11.5(0) specifically listed); releases ...
Security Bulletin: NVIDIA Shield Contains Multiple Vulnerabilities in Mediaserver and Kernel
Vulnerability Details CVE-2016-3847 Kernel nvavp driver heap write overflow Android Security Bulletin - August 2016 CVSS Base Score: 8.8 CVSS Temporal Score: 7.9 CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C CVE-2016-3815 Kernel camera driver stack read of user-controlle...
CVE-2016-3844
mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517...
CVE-2016-3844
mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517...
UBUNTU-CVE-2016-3844
mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517...
CVE-2016-3844
CVE-2016-3844 is a Mediaserver elevation-of-privilege issue in Android. The provided documents consistently describe it as a local privilege escalation affecting Mediaserver on Nexus 9 and Pixel C devices, exploitable by a crafted application to gain privileges. Root cause is tied to Mediaserver ...
Oracle: Security Advisory (ELSA-2007-0979)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2008-0855)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3844
The CVE-2015-3844 entry concerns Android’s ActivityManagerService.getProcessRecordLocked() before 5.1.1 (LMY48I). The issue arises when the method does not verify that an application’s process name matches its package name, which can lead ActivityManager to load the wrong process for certain task...
Gentoo Security Advisory GLSA 201405-12
Gentoo Linux Local Security Checks GLSA 201405-12 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2014-3844
The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information...
CVE-2014-3844
CVE-2014-3844 affects the TinyMCE Color Picker plugin for WordPress (before version 1.2). The root cause is a permissions check flaw that allows remote attackers to modify plugin settings via unspecified vectors. Affected: TinyMCE Color Picker plugin in WordPress; Impact: unauthorized configurati...
Oracle Linux 5 : Critical: / firefox (ELSA-2007-0979)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0979 advisory. 1.5.0.12-0.7.el4.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.7.el4 - Update to...
Scientific Linux Security Update : thunderbird on SL5.x, SL4.x, SL3.x i386/x86_64
Several flaws were found in the way in which Thunderbird processed certain malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. JavaScript support is disabled by defau...