Memory corruption

Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Internet Explorer, aka...

Memory corruption

Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript...

Memory corruption

Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption...

CVE-2017-8608

CVE-2017-8608 is described as a remote code execution vulnerability in the Microsoft browser JavaScript engine, caused by memory corruption when handling objects in memory. Affected products include Microsoft browsers on Windows platforms (Internet Explorer/Edge components inside Windows 7/8/10 f...

CVE-2017-8608

Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to...

CVE-2015-8608

CVE-2015-8608 affects Perl 5.22, via VDir::MapPathA and VDir::MapPathW, enabling a remote attacker to cause a denial of service (out-of-bounds read) and potentially execute arbitrary code through a crafted drive letter or pInName argument. Public coverage shows this vulnerability in IBM Rational ...

CVE-2015-8608

The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service out-of-bounds read and possibly execute arbitrary code via a crafted 1 drive letter or 2 pInName argument...

CVE-2015-8608

The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service out-of-bounds read and possibly execute arbitrary code via a crafted 1 drive letter or 2 pInName argument...

Moderate: Red Hat Security Advisory: Red Hat JBoss BPM Suite security update

An update is now available for Red Hat JBoss BPM Suite. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

CVE-2016-8608

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before...

CVE-2014-8608

The CVE-2014-8608 entry concerns the K7Sentry.sys kernel-mode driver (K7AV Sentry Device Driver) used in multiple K7 Computing products. It is vulnerable in versions before 12.8.0.119, where a NULL pointer dereference can be triggered by a filename containing the string "crashme$$", enabling loca...