119 matches found
CVE-2018-3871
An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability an...
CVE-2018-3871
CVE-2018-3871 is an out-of-bounds write vulnerability in Canvas Draw 4.0.0’s PCX parsing functionality. A specially crafted PCX image processed by the application can trigger an out-of-bounds write, overwriting data and enabling code execution. The CVE is documented as a separate issue from CVE-2...
CVE-2006-3871
This CVE entry is rejected and does not represent an active vulnerability entry.
CVE-2017-3871
CVE-2017-3871 affects Cisco Prime Optical for Service Providers. A RADIUS Secret Disclosure vulnerability exists in the web network management interface that could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker m...
CVE-2016-3871
CVE-2016-3871 refers to multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp within libstagefright/mediaserver on Android. The root cause is memory corruption in the MP3 decoding path, enabling a crafted application to gain privileges. Affected platforms include Android 4.x up to 4.4.4, 5.0.x u...
Oracle: Security Advisory (ELSA-2009-1584)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3871
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23031033...
CVE-2015-3871
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23031033...
CVE-2015-3871
CVE-2015-3871 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file could trigger memory corruption in mediaserver/libstagefright, enabling remote code execution or a denial of service. The Android Security Bulletin notes that builds LMY48T or later address these issues, a...
Nexus Security Bulletin - October 2015Stay organized with collectionsSave and categorize content based on your preferences.
We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY48T or later such as LMY48W and Android M with Securit...
CVE-2015-3871
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23031033...
openSUSE Security Update : puppet (openSUSE-SU-2011:1288-1)
Puppet's certificate authority issued Puppet agent certificates capable of impersonating the Puppet master. Compromised or rogue puppet agents could therefore use their certificates for MITM attacks CVE-2011-3872. Note: If you've set the 'certdnsnames' option in your master's puppet.conf file...
openSUSE Security Update : puppet (openSUSE-SU-2011:1288-1)
Puppet's certificate authority issued Puppet agent certificates capable of impersonating the Puppet master. Compromised or rogue puppet agents could therefore use their certificates for MITM attacks CVE-2011-3872. Note: If you've set the 'certdnsnames' option in your master's puppet.conf file...
CVE-2014-3871
CVE-2014-3871 documents multiple SQL injection vulnerabilities in Geodesic Solutions GeoCore MAX 7.3.3 (Ge oAuctions/GeoClassifieds) where remote attackers can trigger SQL commands via the register.php parameters (1) c[password] and (2) c[username]. The entry notes that the b parameter in index.p...
Microsoft IE内存破坏漏洞(CVE-2013-3871)(MS13-088)
CVECAN ID: CVE-2013-3871 Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer 6-10访问内存对象的方式中存在远程代码执行漏洞，远程攻击者通过特制的网站，利用此漏洞可破坏内存，导致以当前用户权限执行任意代码。 0 Microsoft Internet Explorer 6-10 临时解决方法： 如果您不能立刻安装补丁或者升级，Sebug建议您采取以下措施以降低威胁： 不用在IE中使用打印预览功能。 设置互联网和内联网安全区域设置为“高” 将信任的网站添加到IE可信站点区域。 配置IE在运行活动脚本之前提示或直接禁...
MS13-088: Cumulative Security Update for Internet Explorer (2888505)
The remote host is missing Internet Explorer IE Security Update 2888505. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid7084...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3871)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
CVE-2013-3871
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
CVE-2013-3871
CVE-2013-3871 corresponds to multiple remote code execution/memory corruption vulnerabilities in Microsoft Internet Explorer (IE) 6–10, triggered by viewing a crafted website. Connected sources (MS13-088) describe an in-memory object access flaw in IE that could allow code execution under the use...