CVE-2017-6292

Summary: CVE-2017-6292 is an integer overflow in NVIDIA TLZ TrustZone’s TA-to-TA communication handler that can cause an out-of-bounds write, potentially enabling local code execution or denial of service within TrustZone. Affected: NVIDIA TLZ TrustZone OS components on Android devices (notably S...

CVE-2018-6292

CVE-2018-6292 affects Saperion Web Client version 7.5.2 (build 83166). The NVD entry documents a Remote Code Execution with network attack vector, low complexity, no privileges required, and no user interaction, leading to high impact on confidentiality, integrity, and availability. CVSSv3.0 base...

Security update for php5 (important)

This update for php5 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...

openSUSE Security Update : php5 (openSUSE-2016-985)

This update for php5 fixes the following issues : - security update : - CVE-2016-6128: Invalid color index not properly handled bsc987580 - CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 - CVE-2016-6292: NULL pointer dereference in...

Updated php/xmlrpc-epi/timezone packages fix security vulnerability

Stack-based buffer overflow vulnerability in virtualfileex CVE-2016-6289. Use After Free in unserialize with Unexpected Session Deserialization CVE-2016-6290. Out of bound read in exifprocessIFDinMAKERNOTE CVE-2016-6291. NULL Pointer Dereference in exifprocessusercomment CVE-2016-6292...

[SECURITY] [DSA 3631-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3631-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 26, 2016 https://www.debian.org/security/faq -...

CVE-2016-6292

The exifprocessusercomment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted JPEG image...

BELL-CVE-2016-6292 CVE-2016-6292 does not affect BellSoft software

Bulletin has no description...

CVE-2016-6292

CVE-2016-6292 affects PHP’s exif_process_user_comment in ext/exif/exif.c. A crafted JPEG image can trigger a NULL pointer dereference, causing a denial of service (application crash). Public sources consistently indicate this affects PHP versions before 5.5.38, 5.6.x before 5.6.24, and 7.x before...

CVE-2014-6292

The CVE-2014-6292 entry affects the TYPO3 extension femanager (before 1.0.9). It allows a logged-in frontend user to modify or delete other frontend user records via unspecified vectors due to insufficient access checks. The advisory recommends upgrading to version 1.0.9 or later. Other connected...

Netwave Video Server Detection

Binary data 6292.prm...

CVE-2008-6292

Acc Autos 4.0 is vulnerable to an authentication bypass where an attacker can gain administrative access by setting three cookies: username_cookie to “admin”, right_cookie to “1”, and id_cookie to “1.” This results in remote access with elevated privileges. No mitigations or patched versions are ...

CVE-2008-6292

creationtimestamp| type| source ---|---|--- 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6965 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6968 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6964...

CVE-2008-7059

creationtimestamp| type| source ---|---|--- 2008-08-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6292 2008-08-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32293...

CVE-2007-6292

CVE-2007-6292: SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL via the id parameter. Affected software: MWOpen 1.4 and earlier. Root cause: improper handling of user-supplied id value in the SQL query. Impact: potential ...

Apple Airport Extreme fails to properly process 802.11 frames

Overview A vulnerability exists in the Apple AirPort Extreme wireless driver that may allow an attacker to crash a vulnerable system. Description The Apple AirPort Extreme adapter is an 802.11g compatible wireless adapter used in Apple OS X laptops and desktops. A flaw exists in the way AirPort...

CVE-2006-6292

Apple AirPort Extreme firmware 0.1.27 on Mac OS X 10.4.8 (cores: Core Duo on Mac mini, MacBook, MacBook Pro) is affected by CVE-2006-6292. A flaw in handling certain beacon frames can permit a remote attacker within 802.11 range to trigger out-of-bounds memory access and a kernel panic, causing a...