OptiPNG Denial of Service Vulnerability (CNVD-2016-02172)

OptiPNG is a set of tools for lossless compression of images. A denial of service vulnerability exists in OptiPNG version 0.6.4, which stems from the program failing to properly filter inputs in BMP processing code. An attacker could exploit this vulnerability to cause a denial of service or...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02098)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can crash the application o...

Silicon Graphics LibTiff bmp2tiff tool denial of service vulnerability (CNVD-2016-02091)

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in the 'LZWEncode' function in the tiflzw.c file in Silicon Graphics LibTiff's bmp2tiff tool, which allows a...

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2016-02109)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An arbitrary code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerabili...

Slackware mercurial packet arbitrary code execution vulnerability (CNVD-2016-02025)

Slackware is an open source GNU/Linux operating system developed by software developer Patrick Volkerding. A security vulnerability exists in Slackware's mercurial packets. A remote attacker could exploit the vulnerability to execute arbitrary code...

imlib2 Denial of Service Vulnerability (CNVD-2016-01986)

imlib2 is a general-purpose graphics loading and rendering library. A denial of service exists in the 'load' function in the imlib2 modules/loaders/loaderpnm.c file, which allows remote attackers to exploit this vulnerability to crash an application for denial of service attacks...

imlib2 Denial of Service Vulnerability (CNVD-2016-01985)

imlib2 is a general-purpose graphics loading and rendering library. A security vulnerability in the 'load' function in the imlib2 modules/loaders/loadergif.c file allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability to crash the application...

Huawei Agile Controller-Campus Cross-Site Scripting Vulnerability

Huawei Agile Controller-Campus is a multi-service converged, open and compatible controller product from Huawei, China. A cross-site scripting vulnerability exists in the portal authentication page of Huawei Agile Controller-Campus version V100R001C00SPC315, which can be exploited by a remote...

dhcpcd Denial of Service Vulnerability (CNVD-2016-01949)

dhcpcd is a set of RFC2131 and RFC1541 compliant DHCP client daemons that are used to auto-configure IPv4 networks. A security vulnerability exists in dhcpcd. An attacker could exploit this vulnerability to cause a denial of service...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2016-01927)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Domain Manager CDM 8.11 suffers from a cross-site scripting vulnerability in its implementation, which can be exploited by an authenticated remote user to inject arbitrary...

Drupal Core Information Disclosure Vulnerability (CNVD-2016-01931)

Drupal is a free and open source content management system developed in PHP. Drupal Core has a security vulnerability. In some configurations, a user's email address can be used to log in instead of their username, and a link to "Forgot Password" can display the username associated with a specifi...

OpenJPEG 'opj_pi_next_cprl' function denial of service vulnerability (CNVD-2016-05612)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's opjpinextcprl function line 526 of the pi.c file allows remote attackers to exploit the vulnerability to construct specially crafted JPEG 2000 images for denial of service attacks...

Linux kernel denial of service vulnerability (CNVD-2016-01727)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from user-mode processes not supporting I/O port access. An attacker could exploit this vulnerability to cause a...

Mozilla Firefox and Firefox ESR Graphite 2 code execution vulnerability (CNVD-2016-01593)

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A security vulnerability exists in Mozilla Firefox and Firefox ESR...

Microsoft Windows OpenType Font Analysis Vulnerability (CNVD-2016-01568)

Microsoft Windows is a series of operating systems released by Microsoft.Adobe Type Manager Library is one of the font driver libraries. A remote code execution vulnerability exists in the Windows Adobe Type Manager Library for Microsoft Windows, which arises from the program not properly handlin...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-01575)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE version 10, which stems from the program failing to properly access...

Adobe Flash MPEG-4 Memory Error Referencing Remote Code Execution Vulnerability (CNVD-2016-01526)

Adobe FlashPlayer is a multimedia program player. Adobe Flash has a security vulnerability in the MPEG-4 parsing that can force the reuse of a freed dangling pointer. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current process...

Adobe Flash MPEG-4 Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2016-01517)

Adobe FlashPlayer is a multimedia program player. A security vulnerability in Adobe Flash in the MPEG-4 parsing could allow an affected application to read memory outside of allocated objects. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current...

Google Chrome Blink Denial of Service Vulnerability (CNVD-2016-01503)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. A security vulnerability exists in the WebKit/Source/core/layout/LayoutBlock.cpp file in Blink, used in versions of Google Chrome prior to...

Founder's FIT Handling FIT File Memory Corruption Vulnerability (CNVD-2016-12759)

Founder Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Beifang Founder Electronics Co. A memory corruption vulnerability exists in Founder Fetion's handling of FIT files, which allows an attacker to exploit the vulnerability to construct a...