Google Chrome Security Updates (stable-channel-update-for-desktop-2019-09) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-11622

Summary (CVE-2018-11622) : A boundary/overflow flaw in Foxit Reader’s ConvertToPDF_x86.dll (CVSS up to 8.8) allows a remote attacker to execute arbitrary code after the user visits a malicious page or opens a crafted file. Affected: Foxit Reader on Windows (e.g., versions around 9.0.1.1049 and ea...

CVE-2018-11622

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-5873

An issue was discovered in the nsgetpath function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Andro...

CVE-2018-5873

The CVE-2018-5873 entry refers to a race-condition induced Use-After-Free in the Linux kernel before 4.11, specifically in __ns_get_path within fs/nsfs.c. This affects the mainline Linux kernel and Android builds derived from CAF for Android kernels (Android for MSM, Firefox OS for MSM, QRD Andro...

CVE-2017-5873

Affected product: Unisys s-Par (guest service). Vulnerability: Unquoted Windows search path in the guest service before 4.4.20 can allow local privilege escalation via a Trojan horse executable in %SYSTEMDRIVE% (e.g., program.exe). Exploitation status: not detailed in the provided documents; Open...

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

CVE-2016-5873

CVE-2016-5873 affects the PECL HTTP extension for PHP. A buffer overflow in the HTTP URL parsing functions can be triggered by non-printable characters in a URL, allowing remote attackers to execute arbitrary code. The fix is available in pecl_http version 3.0.1 (upgrade recommended). Multiple co...

CVE-2015-5873

IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5890...

CVE-2015-5873

Apple OS X before 10.11 is affected by CVE-2015-5873 via IOGraphics, allowing local users to gain privileges or cause memory corruption (DoS) through unspecified vectors. The description does not specify the exact exploit path or root cause beyond the memory-corruption/privilege- escalation claim...

CVE-2015-5873

IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5890...

CVE-2014-5873

The CVE-2014-5873 entry relates to the Sears Android app (package com.sears.android) version 6.2.8 failing to verify X.509 certificates for SSL connections. This certificate validation bypass enables potential MITM attackers to spoof servers and exfiltrate sensitive information via a crafted cert...

CVE-2013-5873

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Integration Broker...

CVE-2013-5873

CVE-2013-5873 affects Oracle PeopleSoft’s PeopleTools (versions 8.52 and 8.53). The vulnerability is in the Integration Broker and is described as allowing remote attackers to affect confidentiality via unknown vectors. The exact root cause, exploit details, affected subcomponents, and any remedi...

CVE-2008-5873

CVE-2008-5873 affects Yerba SACphp 6.3 and earlier. A remote attacker can bypass authentication and gain administrative access through a cookie named galleta[sesion] whose value begins with 1:1: followed by a username. The vulnerability enables partial impact on confidentiality, integrity, and av...

CVE-2006-5873

Buffer overflow in the clusterprocessheartbeat function in cluster.c in layer 2 tunneling protocol network server l2tpns before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet...

CVE-2006-5873

CVE-2006-5873 affects l2tpns: Buffer overflow in cluster_process_heartbeat() of cluster.c can cause remote denial of service via a large heartbeat packet. Connected sources confirm the issue in l2tpns before 2.1.21. Debian security advisories indicate the patch is in 2.1.21-1 (unstable) with 2.0....