DEBIAN-CVE-2019-6978

The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is unaffected...

CVE-2019-6978

CVE-2019-6978 concerns the GD Graphics Library (LibGD) 2.2.5, which has a double free vulnerability in the gdImage*Ptr() paths (gd_gif_out.c, gd_jpeg.c, gd_wbmp.c). The description notes that PHP is unaffected. The connected advisories confirm this CVE and tie it to libwmf-related updates in mult...

CVE-2018-6978

vRealize Operations 7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876 contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate th...

CVE-2018-6978

CVE-2018-6978 affects VMware vRealize Operations (vROps) Manager. A local privilege escalation exists due to improper permissions on support scripts, enabling an admin user with shell access to elevate to root on the vROps host. Affected products/versions: vROps 7.x prior to 7.0.0.11287810; 6.7.x...

VMSA-2018-0031:vRealize Operations updates address a local privilege escalation vulnerability

VMSA-2018-0031 vRealize Operations updates address a local privilege escalation vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0031 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: vRealize Operations updates address a local...

About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2017-6978

creationtimestamp| type| source ---|---|--- 2017-05-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42056...

CVE-2017-6978

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-6978

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-6978

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-6978

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-6978

Technical details about CVE-2016-6978 are not provided in the submitted documents; no specifics on affected products, root cause, or fixes. Monitor for updates from official advisories.

Memory corruption

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...

Memory corruption

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...

CVE-2015-6978

CVE-2015-6978 affects Apple iOS prior to 9.1 and macOS (OS X) prior to 10.11.1 where the FontParser is vulnerable to memory corruption via a crafted font file, enabling remote code execution or a denial of service. The vulnerability is based on a memory corruption flaw exploited by specially craf...

CVE-2015-6978

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993,...

CVE-2014-6978

CVE-2014-6978 affects the Android app of Karim Rahal Essoulami (package com.karim.rahal.essoulami.lcxogeyuizteegxvnq), version 1.0, which does not verify X.509 certificates from SSL servers. This failure allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

CVE-2013-6978

Cisco Unified Communications Manager (UCM) Disaster Recovery System (DRS) in 9.1(1) and earlier is affected. The root cause is extraneous information exposed in the web page HTML, allowing remote authenticated users to obtain sensitive device information. Exploitation requires authentication and ...

SuSE 10 Security Update : Mozilla NSS (ZYPP Patch Number 6978)

Mozilla NSS was updated to version 3.12.6. This fixes all currently known issues in mozilla-nss, and also implements the new TLS/SSL renegotiation handling. CVE-2009-3555 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2008-6978

CVE-2008-6978 : Full Revolution aspWebAlbum 3.2 is affected by an unrestricted file upload vulnerability. Uploading a file with an executable extension via the uploadmedia action in album.asp to the pics/ path enables remote code execution. The connected documents do not provide patch or remediat...