Flash Player < 13.0.0.292 / 18.0.0.160 Multiple Vulnerabilities (APSB15-11)

Binary data 8813.prm...

Adobe AIR < 18.0.0.144 Multiple Vulnerabilities (APSB15-11)

Binary data 8835.prm...

Flash Player < 17.0.0.189 (inferred) Multiple Vulnerabilities (APSB15-06 through 11)

Binary data 8814.prm...

One Perfect Bug: Exploiting Type Confusion in Flash

Posted by Natalie Silvanovich, Dazed and Type Confused For some attackers, it is important that an exploit be extremely reliable. That is to say, the exploit should consistently lead to code execution when it is run on a system with a known platform and Flash version. One way to create such an...

Oracle Linux 6 : kernel (ELSA-2015-1221)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1221 advisory. - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202860 1185166 CVE-2015-1805 - net ipv4: Missing sknullsnodeinit in...

Microsoft SharePoint Server Excel Services Multiple Vulnerabilities (3072620)

This host is missing an important security update according to Microsoft Bulletin MS15-070. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2015-2421

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."...

CVE-2015-2375

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka "Microsoft Excel ASLR...

Security feature bypass

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka "Microsoft Excel ASLR...

Security feature bypass

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."...

CVE-2015-2421

CVE-2015-2421 is a Microsoft Internet Explorer ASLR bypass affecting IE 6–11. The root cause is memory/ASLR handling allowing remote code execution via a crafted webpage. The issue is addressed by security update MS15-065, which covers IE vulnerabilities and requires applying the update for affec...

CVE-2015-2375

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to bypass the ASLR protection mechanism via a crafted spreadsheet, aka "Microsoft Excel ASLR...

CVE-2015-2421

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."...

CVE-2015-2375

Microsoft Excel ASLR Bypass (CVE-2015-2375) affects Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, and Excel Services on SharePoint Server 2010 SP2/2013 SP1. Root cause: crafted spreadsheet allows bypassing ASLR protection, enabling potential memory-disclosure or downst...

Microsoft Excel ASLR Bypass (MS15-070; CVE-2015-2375)

A security feature bypass vulnerability exists in Microsoft Excel. The vulnerability is caused when memory is released in an unintended manner. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Excel file...

PT-2015-5733

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2010 SP2 through 2013 SP1 Excel Viewer version 2007 SP3 Excel Services on SharePoint Server versions 2010 SP2 through 2013 SP1 Description A security feature bypass issue exists in Microsoft Excel, allowing remote...

Microsoft Excel CVE-2015-2375 ASLR Security Bypass Vulnerability

Description Microsoft Excel is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Technologies Affected Microsoft Excel 2010 SP2 32-bit editions...

Microsoft Internet Explorer ASLR Bypass (MS15-065: CVE-2015-2421)

A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper implementation of the Address Space Layout Randomization ASLR security feature. A remote attacker can exploit this issue by enticing a user to open a specially crafted...

CVE-2015-2421: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."...

PT-2015-1662

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 11 Description The issue is related to the bypass of the Address Space Layout Randomization ASLR protection mechanism. This can be achieved via a crafted web site, allowing a remote attacker to mo...