CVE-2018-3888

Summary: CVE-2018-3888 is a memory corruption vulnerability in Computerinsel Photoline 20.53, affecting the PCX parsing path. A specially crafted PCX image can trigger an out-of-bounds write in the PCX color map handling, potentially enabling code execution. Relevant sources describe the vulnerab...

CVE-2015-3888

Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...

CVE-2015-3888

CVE-2015-3888 affects Jolla Sailfish OS before 1.1.2.16. The issue is in the tel: URL handling, where spaces in the URL can be exploited to spoof the caller ID and trigger calls to arbitrary numbers. This is a remote defense/reachability concern for users and operators relying on accurate caller ...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

According to its self-reported version, the Cisco Unified Communications Manager is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Debian DSA-3888-1 : exim4 - security update (Stack Clash)

The Qualys Research Labs discovered a memory leak in the Exim mail transport agent. This is not a security vulnerability in Exim by itself, but can be used to exploit a vulnerability in stack handling. For the full details, please refer to their advisory published at:...

Debian Security Advisory DSA 3888-1 (exim4 - security update)

The Qualys Research Labs discovered a memory leak in the Exim mail transport agent. This is not a security vulnerability in Exim by itself, but can be used to exploit a vulnerability in stack handling. OpenVAS Vulnerability Test $Id: deb3888.nasl 6618 2017-07-07 14:17:52Z cfischer $ Auto-generate...

CVE-2017-3888

The CVE-2017-3888 entry concerns Cisco Unified Communications Manager (CUCM) and describes a reflected cross-site scripting (XSS) vulnerability in the web-based management interface. The issue requires an authenticated administrator and can lead to script execution in the browser of a user access...

CVE-2016-3888

CVE-2016-3888 affects Android 4.x (4.4.4+), 5.0.x (5.0.2+), 5.1.x (5.1.1+), 6.x (before 2016-09-01) and 7.0 (before 2016-09-01). The issue, in internal/telephony/SMSDispatcher.java, lets physically proximate attackers bypass Factory Reset Protection and trigger premium SMS sending during Setup Wi...

Yokogawa CS3000 SCADA BKFSim_vhfd.exe Remote Code Execution (CVE-2014-3888)

A remote code execution vulnerability has been reported in Yokogawa CENTUM CS 3000. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...

CVE-2014-3888

CVE-2014-3888 affects Yokogawa CENTUM CS 1000/3000, CENTUM VP, Exaopc, B/M9000 CS/VP with BKFSim_vhfd.exe vulnerable to a stack-based buffer overflow when FCS/Test Function is enabled. Remote attackers can cause arbitrary code execution by sending crafted UDP packets. Affects multiple revisions (...

Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Udp def initializeinfo =...

Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CS3000 BKFSimvhfd.exe Buffer Overflow', 'Description' = %q This module exploits an stack based buffer overflow on Yokogawa...

Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow Exploit

This Metasploit module exploits an stack based buffer overflow on Yokogawa CS3000. The vulnerability exists in the service BKFSimvhfd.exe when using malicious user-controlled data to create logs using functions like vsprintf and memcpy in a insecure way. This Metasploit module has been tested...

Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Yokogawa CS3000 BKFSimvhfd.exe Buffer Overflow', 'Description' = %q This module exploits an stack based buffer overflow on Yokogawa...

Yokogawa Centum Buffer Overflow Vulnerability

OVERVIEW Researcher group Rapid7 has identified a buffer overflow vulnerability in Yokogawa CENTUM products. Yokogawa has produced a patch that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Yokogawa reports that the vulnerability affects the...

CVE-2013-3888

dxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "DirectX Graphics Kernel Subsystem Double Fetch Vulnerability."...

CVE-2013-3888

CVE-2013-3888 affects dxgkrnl.sys in the DirectX Graphics Kernel Subsystem used by Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The root cause is an elevation-of-privilege issue in kernel-mode code that could allow a local attacker to execute arbitrary code with kernel pr...

Microsoft Windows Kernel 'dxgkrnl.sys' CVE-2013-3888 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that is related to DirectX Graphics Kernel Subsystem. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of...

CVE-2012-3888

The CVE-2012-3888 entry corresponds to AirDroid 1.0.4 beta, where the login implementation allows remote bypass of the multiple-login protection by modifying a pass value in JSON data. Exploitation details are not provided beyond this manipulation vector; in-the-wild status is not stated. Publicl...

Apple Safari Webkit Multiple Vulnerabilities - March12 (Windows)

The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafariwebkitmultvulnmar12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Apple Safari Webkit Multiple Vulnerabilities - March12 Windows Authors: Rachana Shetty Copyrigh...