Lucene search
K

956 matches found

Cvelist
Cvelist
added 2015/10/30 4:0 p.m.28 views

CVE-2015-8028

Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...

7.6AI score0.03417EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2015/10/20 12:0 a.m.33 views

SAP 3D Visual Enterprise Viewer Flic Animation Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS6.9AI score0.03417EPSS
Exploits0
OpenVAS
OpenVAS
added 2015/10/13 12:0 a.m.40 views

SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2014:0824-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.4AI score0.03334EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/10/06 12:0 a.m.4 views

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure.

The vulnerability of the AnimationThread function in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using the incorrect sscanf argument...

7.5CVSS8.2AI score0.05714EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/10/01 12:0 a.m.4 views

The vulnerability of the iOS operating system, which allows a hacker to gain access to the swap space

The vulnerability of CoreAnimation in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to the swap buffer through a specially crafted application that runs in the background...

4.3CVSS5.7AI score0.003EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2015/09/22 12:0 a.m.0 views

UBUNTU-CVE-2015-7176

The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impa...

7.5CVSS7.6AI score0.05714EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/08/25 7:30 a.m.2 views

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-90)

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

7.5CVSS7.5AI score0.01604EPSS
Exploits0References5
OSV
OSV
added 2015/08/11 12:0 a.m.1 views

UBUNTU-CVE-2015-4488

Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to have an unspecified impact by leveraging a StyleAnimationValue::operator self assignment...

7.5CVSS6.8AI score0.01604EPSS
Exploits0References5
CNVD
CNVD
added 2015/04/10 12:0 a.m.3 views

Apple Mac OS X CoreAnimation Memory Misreference Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. A memory misreference vulnerability in Apple Mac OS X CoreAnimation allows an attacker to construct a malicious WEB site and trick users into parsing it, which could execute arbitrary code...

6.8CVSS7AI score0.02114EPSS
Exploits1References1
Snyk
Snyk
added 2015/03/09 10:0 p.m.2 views

Arbitrary Code Execution

Overview Affected versions of this package are vulnerable to Arbitrary Code Execution via unsafe svg animation tags. Details Exploit Example: html Here the anchor's href is animated, starting from a value that's a javascript URI. This allows execution of arbitrary javascript in the process...

7.4CVSS7.5AI score
Exploits0References2
exploitpack
exploitpack
added 2015/01/05 7:9 p.m.20 views

Music-Animation-Machine-MIDI-Player-SEH

Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 junk='\x41' 112 seh='\xeb\x06\x90\x90' pad='\x90' 10 junk2='\x42' 9496 Sor...

7.4AI score
Exploits0
myhack58
myhack58
added 2014/12/16 12:0 a.m.15 views

Android system is the presence of the cross-signed certificate vulnerability can lead to system crash-vulnerability warning-the black bar safety net

Overview Trend Micro found the Android system in the presence of a cross-signed certificate handling vulnerabilities. Currently the Android version still does not correctly handle these certificates. When two certificates with a loop certificate chain the certificate of A signature certificate...

0.6AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2014/12/04 12:0 a.m.27 views

PTC IsoView Activex Control Multiple Animation Methods Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the PTC IsoView ActiveX control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.5CVSS7AI score0.03999EPSS
Exploits0References1
Fedora
Fedora
added 2014/09/27 9:47 a.m.19 views

[SECURITY] Fedora 20 Update: amor-4.14.1-1.fc20

Amusing Misuse of Resources animation that sits on top of the curent window...

6.9CVSS1.7AI score0.00034EPSS
Exploits1
NVD
NVD
added 2014/09/03 10:55 a.m.18 views

CVE-2014-1563

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

10CVSS7.5AI score0.0144EPSS
Exploits0References13
Prion
Prion
added 2014/09/03 10:55 a.m.21 views

Design/Logic Flaw

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

10CVSS8.1AI score0.0144EPSS
Exploits0References13Affected Software6
CVE
CVE
added 2014/09/03 10:0 a.m.118 views

CVE-2014-1563

Mozilla Firefox before 32.0 (and ESR 31.x before 31.1) and Thunderbird 31.x before 31.1 are affected by a use-after-free in mozilla::DOMSVGLength::GetTearOff triggered by an SVG animation with DOM interactions, enabling remote code execution or a denial of service via heap memory corruption. Upgr...

10CVSS9.5AI score0.0144EPSS
Exploits0References13Affected Software2
Cvelist
Cvelist
added 2014/09/03 10:0 a.m.24 views

CVE-2014-1563

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

9.6AI score0.0144EPSS
Exploits0References13
UbuntuCve
UbuntuCve
added 2014/09/02 12:0 a.m.28 views

CVE-2014-1563

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

10CVSS7AI score0.0144EPSS
Exploits0References4
OSV
OSV
added 2014/09/02 12:0 a.m.1 views

UBUNTU-CVE-2014-1563

Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG animation...

10CVSS7.3AI score0.0144EPSS
Exploits0References5
Rows per page
Query Builder