DEBIAN-CVE-2017-7861

Google gRPC before 2017-02-22 has an out-of-bounds write related to the gprfree function in core/lib/support/alloc.c...

CVE-2017-7861

Google gRPC before 2017-02-22 contains an out-of-bounds write in gpr_free (core/lib/support/alloc.c). Affected component is the gRPC core library; vulnerability arises from an out-of-bounds write in gpr_free. CVSS indicates high/critical impact with potential for crash or code execution depending...

Flash Player < 11.2.202.644 / 23.0.0.207 Multiple Vulnerabilities (APSB16-37)

Binary data 9802.prm...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:2778-1)

This update to Adobe Flash Player 11.2.202.644 fixes the following security issues : - type confusion vulnerabilities that could lead to code execution CVE-2016-7860, CVE-2016-7861, CVE-2016-7865 - use-after-free vulnerabilities that could lead to code execution CVE-2016-7857, CVE-2016-7858,...

openSUSE Security Update : flash-player (openSUSE-2016-1285)

This update to Adobe Flash Player 11.2.202.644 fixes the following security issues : - type confusion vulnerabilities that could lead to code execution CVE-2016-7860, CVE-2016-7861, CVE-2016-7865 - use-after-free vulnerabilities that could lead to code execution CVE-2016-7857, CVE-2016-7858,...

Security update for flash-player (important)

This update to Adobe Flash Player 11.2.202.644 fixes the following security issues: - type confusion vulnerabilities that could lead to code execution CVE-2016-7860, CVE-2016-7861, CVE-2016-7865 - use-after-free vulnerabilities that could lead to code execution CVE-2016-7857, CVE-2016-7858,...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt68

Nov. 9, 2016 Sergey V Turchin 3:11-alt68 - new version - security fixes: CVE-2016-7857, CVE-2016-7858, CVE-2016-7859, CVE-2016-7860, CVE-2016-7861, CVE-2016-7862, CVE-2016-7863, CVE-2016-7864, CVE-2016-7865...

CVE-2016-7861

CVE-2016-7861 is an Adobe Flash Player type-confusion vulnerability that could enable remote code execution. Affected products/versions include Flash Player 11.2.202.643 and 23.0.0.205 and earlier. Connected advisories group this CVE with other Flash flaws (CVE-2016-7857/7858/7859/7860/7862/7863/...

November 2016 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB16-37: CVE-2016-7857, CVE-2016-7858, CVE-2016-7859, CVE-2016-7860, CVE-2016-7861, CVE-2016-7862, CVE-2016-7863, CVE-2016-7864, CVE-2016-7865...

MS16-141: Security Update for Adobe Flash Player (3202790)

The remote Windows host is missing KB3202790. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code by convincing a user to visit a website containing specially crafted Flash content...

Adobe Flash Player for Mac <= 23.0.0.205 Multiple Vulnerabilities (APSB16-37)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 23.0.0.205. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code by...

Adobe Flash Player <= 23.0.0.205 Multiple Vulnerabilities (APSB16-37)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.205. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code by convincing a...

HP Client Automation and Radia Client Automation is vulnerable to remote code execution

Overview Radia Client Automation previously sold under the name HP Client Automation agent prior to version 9.1 is vulnerable to arbitrary remote code execution. Description According to ZDI's advisory for ZDI-15-363, which has been assigned CVE-2015-7860: "This vulnerability allows remote...

CVE-2015-7861

The CVE-2015-7861 vulnerability affects Hewlett-Packard/Radia Client Automation agent (formerly HP Client Automation) before version 9.1. An unauthenticated attacker could remotely execute arbitrary code by sending arbitrary commands to the agent, potentially gaining SYSTEM privileges. Exploitati...

CVE-2015-0751

Cisco IP Phone 7861 is affected when using firmware from Cisco Unified Communications Manager 10.3(1). The issue stems from improper boundary restrictions when user-supplied input to the affected application is processed, allowing remote attackers to cause a denial of service by sending crafted p...

CVE-2015-0751

Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.31 is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800...

Cisco IP Phone 7861 Denial of Service Vulnerability

The Cisco IP Phone 7861 is an IP phone that enables broadband audio-video communication. A security vulnerability exists in the Cisco IP Phone 7861. Allowing an unauthenticated, remote attacker to exploit this vulnerability could cause the device to reboot, resulting in a denial of service...

CVE-2014-7861

The IOHIDSecurePromptClient function in Apple OS X does not properly validate pointer values, which allows remote attackers to execute arbitrary code or cause a denial of service system crash via a crafted web site...

CVE-2014-7861

CVE-2014-7861 affects Apple OS X; the IOHIDSecurePromptClient function does not properly validate pointer values, enabling remote attackers to execute arbitrary code or trigger a denial of service (system crash) via a crafted web site. The NVD lists a high base score (9.3, NETWORK attack vector, ...