52 matches found
CVE-2017-6874
Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior that causes incorrect interaction betwee...
CVE-2017-6874
Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior that causes incorrect interaction betwee...
CVE-2017-6874
The CVE-2017-6874 entry corresponds to a Linux kernel race condition in kernel/ucount.c (through 4.10.2). The vulnerability allows local users to trigger a denial of service (use-after-free and system crash) via crafted system calls that affect the interaction between put_ucounts and get_ucounts....
CVE-2017-6874
Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via crafted system calls that leverage certain decrement behavior that causes incorrect interaction betwee...
CVE-2016-6874
The arrayrecursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion...
CVE-2016-6874
The arrayrecursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion...
CVE-2016-6874
CVE-2016-6874 affects Facebook HHVM (before 3.15.0) via the array_*_recursive functions, enabling unspecified impact through recursion. The available connected docs confirm the affected component and root cause (recursion in specific functions) but do not provide concrete exploit details, vectors...
CVE-2014-6874
The CVE-2014-6874 issue affects the ModSim Connected (com.concursive.modsim) Android app version 2.0, where the client does not verify X.509 certificates from SSL servers. This weakens authentication and enables MITM attackers to spoof legitimate servers and extract sensitive information via a cr...
Vortex Media Group Light Alloy M3U File Handling Buffer Overflow (CVE-2013-6874)
A stack buffer overflow vulnerability has been reported in Light Alloy media player. The vulnerability is due to a lack of boundary check when handling M3U files. Successful exploitation could allow arbitrary code execution in the context of the target user...
CVE-2013-6874
CVE-2013-6874: A stack-based buffer overflow in Vortex Light Alloy prior to 4.7.4 allows remote attackers to execute arbitrary code via a long URL in an .m3u file. Affected: Vortex Light Alloy,
CVE-2013-6874
creationtimestamp| type| source ---|---|--- 2013-11-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29777...
CVE-2006-6874
The vulnerability is an XSS flaw in eNdonesia 8.4, specifically in the file/functIon friend.php, exploitable via the (1) Message or (2) Your Name fields. The connected records confirm affected software and version (eNdonesia 8.4) and that remote attackers can inject arbitrary web script or HTML. ...