Lucene search
+L

64 matches found

Positive Technologies
Positive Technologies
added 2023/06/07 12:0 a.m.11 views

PT-2023-22797 · Apache +1 · Apache Guacamole +1

Name of the Vulnerable Software and Affected Versions: Apache Guacamole versions 0.9.10 through 1.5.1 Description: The issue allows an attacker to execute arbitrary code with the privileges of the guacd process, depending on timing, as Apache Guacamole may continue to reference a freed RDP audio...

8.8CVSS9.1AI score0.0825EPSS
SaveExploits2References22
CNNVD
CNNVD
added 2023/06/07 12:0 a.m.7 views

Apache Guacamole 资源管理错误漏洞

Apache Guacamole is a clientless remote desktop gateway from the Apache USA Foundation. The product supports protocols such as VNC, RDP and SSH. A resource management error vulnerability exists in Apache Guacamole versions 0.9.10 through 1.5.1, which stems from the fact that Apache Guacamole may...

8.1CVSS8.9AI score0.01113EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:30 a.m.6 views

SUSE CVE-2014-1542

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...

6.8CVSS9.2AI score0.05298EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:30 a.m.5 views

SUSE CVE-2014-1549

The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and...

9.3CVSS9.3AI score0.05641EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:22 a.m.5 views

SUSE CVE-2018-18503

When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox 65...

8.8CVSS8.6AI score0.01375EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.9 views

MediaTek audio 缓冲区错误漏洞

MediaTek audio is an audio component of a chip from China's MediaTek Corporation MediaTek. A security vulnerability exists in the audio module of the MediaTek chips, which is caused by an out-of-scope write due to incorrect boundary checking. This could result in a local privilege escalation that...

6.7CVSS6.8AI score0.00099EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.14 views

Mozilla Firefox Security Advisory (MFSA2014-57) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

9.3CVSS9.6AI score0.05641EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2020/10/14 2:15 p.m.4 views

CVE-2020-0414

In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

6.5CVSS7.2AI score0.00996EPSS
SaveExploits0References2
Prion
Prion
added 2020/10/14 2:15 p.m.20 views

Information disclosure

In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

4.3CVSS6.3AI score0.00996EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/14 1:5 p.m.24 views

CVE-2020-0414

In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

6.5AI score0.00996EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/09/21 6:24 a.m.22 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists when JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations...

8.8CVSS3AI score0.01375EPSS
SaveExploits0References3Affected Software3
Microsoft CVE
Microsoft CVE
added 2020/09/02 7:0 a.m.5 views

oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.

...

3.3CVSS7AI score0.00453EPSS
SaveExploits0
NVD
NVD
added 2020/08/27 4:15 p.m.20 views

CVE-2020-14415

osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...

3.3CVSS4.1AI score0.00453EPSS
SaveExploits0References2
Prion
Prion
added 2020/08/27 4:15 p.m.22 views

Design/Logic Flaw

osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...

2.1CVSS4.1AI score0.00453EPSS
SaveExploits0References2Affected Software2
UbuntuCve
UbuntuCve
added 2020/06/19 12:0 a.m.34 views

CVE-2020-14415

osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...

3.3CVSS6.8AI score0.00453EPSS
SaveExploits0References2
NVD
NVD
added 2019/09/30 4:15 p.m.21 views

CVE-2019-2341

Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

7.8CVSS8.6AI score0.00191EPSS
SaveExploits0References1
Prion
Prion
added 2019/09/30 4:15 p.m.22 views

Buffer overflow

Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

4.6CVSS8.5AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/09/30 3:40 p.m.26 views

CVE-2019-2341

Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

8.6AI score0.00191EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/02/19 12:0 a.m.8 views

The vulnerability of Firefox browser, related to resource release errors, allows attackers to trigger a service failure.

The vulnerability of the Audio Buffer component in the Firefox browser is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted web page...

6.8CVSS7.7AI score0.01375EPSS
SaveExploits0References4Affected Software3
OSV
OSV
added 2019/02/07 7:29 a.m.3 views

ALPINE-CVE-2019-7578

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c...

8.1CVSS7.2AI score0.02911EPSS
SaveExploits1References1
Rows per page
Query Builder