4829 matches found
Design/Logic Flaw
IrfanView version 4.44 32bit has a "Data from Faulting Address controls Branch Selection starting at USER32!wvsprintfA+0x00000000000002f3" issue, which might allow attackers to execute arbitrary code via a crafted file...
Code injection
SWFTools 2013-04-09-1007 on Windows has a "Data from Faulting Address controls Branch Selection starting at image0000000000400000+0x0000000000003e71" issue. This issue can be triggered by a malformed TTF file that is mishandled by font2swf. Attackers could exploit this issue for DoS Access...
CVE-2017-8420
SWFTools 2013-04-09-1007 on Windows is affected by a DoS vulnerability where a malformed TTF file mishandled by font2swf causes an access violation (Data from Faulting Address controls Branch Selection at image00000000_00400000+0x0000000000003e71). The issue’s root cause is in the font processing...
CVE-2017-8420
Removed by vendor...
CVE-2017-10780: Improper Restriction of Operations within the Bounds of a Memory Buffer
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at xnview+0x0000000000372b4a."...
CVE-2017-10699
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution...
Windows kernel information disclosure vulnerability: June 13, 2017 (KB4022013)
None None...
Windows 10 Mitigations Make Future EternalBlue Attacks Difficult
The emergence of a port of the EternalBlue exploit to Windows 10 signals that white-hat researchers have likely done what the NSA has already long ago accomplished. The leaked version of the powerful Windows SMB attack shared by the ShadowBrokers in April was built only to attack Windows XP and...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds. In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file. Remediation A fix was pushed into the master...
UBUNTU-CVE-2017-9372
PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service buffer overflow and application crash via a SIP packet with a crafted CSeq header in conjunction...
Cuvva: Reflected XSS on Branch domain
Date: 22th May 2017 Browser: Firefox 50 Parameter: branchflowid Authenticated: No Details: Arbitrary javascript can be injected in the home search bar. The search parameter called sort is vulnerable. POC:...
Weblate: Self-XSS can be achieved in the editor link using filter bypass
Description I saw the fixed issue in the https://hackerone.com/reports/223692 and i think i found another filter bypass. I noticed that we actually can use special keywords like %branchs, %files and %lines. So XSS can be achieved in this way: %branchs:alert1;//https:// if the branch will be named...
openSUSE Security Update : Mozilla Firefox (openSUSE-2017-509)
Mozilla Firefox was updated to Firefox 52.1.0esr. The following vulnerabilities were fixed bsc1035082 : - CVE-2017-5443: Out-of-bounds write during BinHex decoding - CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1 - CVE-2017-5464: Memory corruption wi...
katsastushinnat.fi XSS vulnerability
Vulnerable URL:...
firstdial.in XSS vulnerability
Open Bug Bounty ID: OBB-222004 Description| Value ---|--- Affected Website:| firstdial.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
USN-3243-1 git vulnerability
It was discovered that Git incorrectly sanitized branch names in the PS1 variable when configured to display the repository status in the shell prompt. If a user were tricked into exploring a malicious repository, a remote attacker could use this issue to execute arbitrary code...
USN-3243-1: Git vulnerability
It was discovered that Git incorrectly sanitized branch names in the PS1 variable when configured to display the repository status in the shell prompt. If a user were tricked into exploring a malicious repository, a remote attacker could use this issue to execute arbitrary code...
Git Arbitrary Code Execution Vulnerability (CNVD-2017-03446)
Git is a free, open source distributed version control system developed by American software developer Linus Torvalds Linus Torvalds. A security vulnerability exists in the contrib/completion/git-prompt.sh file in versions of Git prior to 1.9.3, which stems from the program failing to filter the...