Memory corruption

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4275,...

Memory corruption

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4274,...

CVE-2016-4276

Technical details for CVE-2016-4276 are not publicly available in the provided documents. Monitor for updates when connected sources (if any) publish specifics about affected products, vectors, impact, or remediation.

CVE-2016-4276

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4274,...

September 2016 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB16-29: CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-428...

MS16-117: Security Update for Adobe Flash Player (3188128)

The remote Windows host is missing KB3188128. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist that allow an unauthenticated, remote attacker to disclose sensitive information. CVE-2016-4271, CVE-2016-4277, CVE-2016-4278 - Multiple...

Gentoo Security Advisory GLSA 201412-46

Gentoo Linux Local Security Checks GLSA 201412-46 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-4276

CVE-2015-4276 affects Cisco WebEx Meetings Server 2.5MR1. The vulnerability arises from insufficient sanitization of user-supplied input, allowing an authenticated, remote attacker to craft a command parameter to execute arbitrary code on the target system. Impact per sources: remote code executi...

Fedora 20 : lcms-1.19-13.fc20 (2015-1648)

apply patch for CVE-2013-4276 - apply patch for 'Use of uninitialized values on 64 bit machines.' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Oracle Solaris Third-Party Patch Update : lcms (cve_2013_4276_buffer_errors)

The remote Solaris system is missing necessary patches to address security updates : - Multiple stack-based buffer overflows in LittleCMS aka lcms or liblcms 1.19 and earlier allow remote attackers to cause a denial of service crash via a crafted 1 ICC color profile to the icctrans utility or 2...

CVE-2014-4276

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Common Internet File System CIFS...

CVE-2014-4276

The provided connected documents confirm CVE-2014-4276 affects Oracle Solaris 11 via the CIFS/SMB server component. The issue is described as an easily exploitable, unauthenticated network vulnerability in the Solaris CIFS server that can allow unauthorized read/update of Solaris data and partial...

Oracle Solaris Critical Patch Update : oct2014_11_2SRU0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: SMB server kernel module. The supported version that is affected is 11. Easily exploitable vulnerability requiring...

openSUSE Security Update : lcms (openSUSE-SU-2013:1547-1)

Some minor stackoverflows in lcms utilities were fixed. CVE-2013-4276. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-757. The text description of this plugin is C SUSE LLC...

SuSE 11.2 / 11.3 Security Update : lcms (SAT Patch Numbers 8424 / 8425)

The lcms userland utilities were updated to fix stack overflows. - Multiple stack-based buffer overflows in LittleCMS allowed remote attackers to cause a denial of service crash via a crafted 1 ICC color profile to the icctrans utility or 2 TIFF image to the tiffdiff utility. CVE-2013-4276...

CVE-2013-4276

Multiple stack-based buffer overflows in LittleCMS aka lcms or liblcms 1.19 and earlier allow remote attackers to cause a denial of service crash via a crafted 1 ICC color profile to the icctrans utility or 2 TIFF image to the tiffdiff utility...

CVE-2013-4276

CVE-2013-4276 affects LittleCMS (lcms/liblcms) 1.19 and earlier. The vulnerability arises from multiple stack-based buffer overflows in the ColorSpace conversion calculator and the TIFF image comparison utility, enabling a remote attacker to trigger a crash (DoS) by inviting the user to process a...

[ MDVSA-2013:220 ] lcms

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:220 http://www.mandriva.com/en/support/security/ Package : lcms Date : August 27, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Updated lcms packages fix security...

CVE-2012-4276

The CVE-2012-4276 entry concerns Hitachi IT Operations Director versions 02-50-01 through 02-50-07, and version 03-00 before 03-00-08. The issue is described as an unspecified vulnerability that allows attackers to cause a denial of service via unknown attack vectors. The available connected docu...

Android 2.3 信息泄露漏洞

CVE-2011-4276 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android 2.3.6之前的2.3版本中的Bluetooth servicecom/android/phone/BluetoothHeadsetService.java中存在漏洞。远程攻击者可利用该漏洞借助AT电话簿转移，在蓝牙范围内获取联系人数据。 0 Android 2.3 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...