libxml2 heap buffer overflow vulnerability (CNVD-2015-08397)

libxml2 is an XML parser and markup toolset. A heap buffer overflow vulnerability exists in versions of libxml2 prior to 2.9.3. An attacker is able to rely on context to cause a denial of service via an unspecified vector...

Mozilla Firefox Same-Origin Policy Bypass Vulnerability (CNVD-2015-08332)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 43.0 and Firefox ESR version...

Adobe Flash Player and AIR Memory Corruption Vulnerability (CNVD-2015-08213)

FlashPlayer is a multimedia program player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. A security vulnerability exists in the implementation of Adobe Flash...

Adobe Flash Player Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08271)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory corruption vulnerability exists in Adobe Flash Player's handling of special S...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08242)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

Apple OS X OpenGL Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08150)

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OpenGL with a memory corruption vulnerability that allows attackers to construct special WEB pages that can be tricked into loading by the user, which can crash the application or execute arbitrary code...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08211)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08240)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

Apple Safari WebKit Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08084)

Apple Safari is a WEB browser developed by Apple. An unspecified memory corruption arbitrary code execution vulnerability exists in Apple Safari WebKit, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08227)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory error referencing arbitrary code execution vulnerability exists in Adobe Flas...

Apple OS X libc buffer overflow arbitrary code execution vulnerability (CNVD-2015-08154)

Apple OS X is an operating system developed by Apple Inc. A buffer overflow vulnerability exists in Apple OS X libc, which allows attackers to construct a special package that can be tricked into loading by the target user, which can execute arbitrary code...

Apple OS X ASN.1 Parser Memory Corruption Vulnerability (CNVD-2015-08144)

Apple OS X is an operating system developed by Apple Inc. A security vulnerability in the handling of special certificates by the Apple OS X ASN.1 resolver allows attackers to conduct denial of service attacks or execute arbitrary code by submitting a certificate request...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08264)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08204)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08203)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2015-08102)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer 11 and Microsoft Edge, which could allow a remote attacker to execute arbitrary code or cause a denia...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08007)

Internet Explorer is a web browser from Microsoft. Internet Explorer 8 has a security vulnerability in the use of CStylesheet objects. By tampering with document elements, an attacker could cause out-of-bounds memory access and then execute arbitrary code in the current process context...

Android mediaserver memory corruption vulnerability (CNVD-2015-08006)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android versions prior to 5.1.1 LMY48Z, 6.0 2015-12-01 and prior to 6.0 2015-12-01, which can be exploited by remote attackers to execute arbitrary code or cause a denial of...

Microsoft Internet Explorer XSS Filter Bypass Vulnerability (CNVD-2015-08028)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security feature bypass vulnerability exists in Microsoft IE that stems from the program failing to properly enforce cross-domain...

Microsoft Office Memory Corruption Vulnerability (CNVD-2015-08011)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which arises from the program failing to...