491 matches found
flash-plugin: information leaks leading to ASLR bypass (APSB15-09)
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 do not properly restrict discovery of memory addresses,...
Microsoft Windows JScript & VBScript Security Bypass Vulnerability (3057263)
This host is missing an important security update according to Microsoft Bulletin MS15-053. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
Microsoft Internet Explorer Memory Corruption (MS15-043: CVE-2015-1686)
A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to JScript and VBScript engines not using Address Space Layout Randomization ASLR security feature when rendered in Internet Explorer. A remote attacker can exploit this issue by...
Google Chrome < 42.0.2311.152 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 42.0.2311.152. It is, therefore, affected by multiple vulnerabilities related to Adobe Flash : - An unspecified security bypass flaw exists that allows an attacker to disclose sensitive information. CVE-2015-3044 -...
Adobe Flash Player Security Bypass Vulnerability (CNVD-2015-02487)
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player that originates from the program failing to properly restric...
Ubuntu 14.10 : linux vulnerabilities (USN-2565-1)
An integer overflow was discovered in the stack randomization feature of the Linux kernel on 64 bit platforms. A local attacker could exploit this flaw to bypass the Address Space Layout Randomization ASLR protection mechanism. CVE-2015-1593 An information leak was discovered in the Linux Kernel'...
Ubuntu: Security Advisory (USN-2565-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2565-1: Linux kernel vulnerabilities
An integer overflow was discovered in the stack randomization feature of the Linux kernel on 64 bit platforms. A local attacker could exploit this flaw to bypass the Address Space Layout Randomization ASLR protection mechanism. CVE-2015-1593 An information leak was discovered in the Linux Kernel'...
Ubuntu: Security Advisory (USN-2560-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2563-1 linux vulnerabilities
Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote attacker could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges on the system. CVE-2015-1421...
Microsoft windows kernel mode driver null pointer reference vulnerability
Microsoft Windows is a popular operating system. A null pointer reference vulnerability exists in the Microsoft Windows kernel mode driver that can disclose the contents of kernel memory. The vulnerability allows attackers to obtain sensitive information and bypass ASLR protection...
Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2515-2)
USN-2515-1 fixed vulnerabilities in the Linux kernel. There was an unrelated regression in the use of the virtual counter CNTVCT on arm64 architectures. This update fixes the problem. We apologize for the inconvenience. A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the...
Ubuntu 14.10 : linux vulnerabilities (USN-2518-1)
A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...
Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2515-1)
A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...
USN-2518-1: Linux kernel vulnerabilities
A flaw was discovered in the Kernel Virtual Machine's KVM emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS crash or potentially gain privileges on the guest OS...
Linux Kernel ASLR Integer Overflow Vulnerability
Linux kernel is an open source operating system. The Linux kernel ASLR implementation suffers from an integer overflow that allows an attacker to exploit a vulnerability to crash an application or execute arbitrary code...
Microsoft Office ASLR Security Bypass Vulnerability
Microsoft Office is a popular office software suite developed by Microsoft. Microsoft Office has a security vulnerability in the handling of Office documents that allows an attacker to bypass ASLR security protections and gain access to sensitive information about the stack memory layout, which c...
MS15-009: Description of the security update for JScript9.dll in Internet Explorer: February 10, 2015
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage.SummaryThis article describes the cumulative security update for JScript9.dll in Internet Explorer that is dated February 10, 2015. This security update resolves an iss...
Microsoft Office Shared Component ASLR Bypass (MS15-013; CVE-2014-6362)
A security feature bypass vulnerability exists in Microsoft Office Shared Component. The vulnerability is due to an improper implementation of Address Space Layout Randomization ASLR by MSCOMCTL common controls library used by Microsoft Office software. A remote attacker can exploit this issue by...
USN-2492-1: Linux kernel vulnerabilities
Andy Lutomirski discovered an information leak in the Linux kernel's Thread Local Storage TLS implementation allowing users to bypass the espfix to obtain information that could be used to bypass the Address Space Layout Randomization ASLR protection mechanism. A local user could exploit this fla...