273 matches found
Type Confusion in Content Protection HECI Service in Intel® Graphics Driver allows unprivileged user to elevate privileges via local access
Summary: Type Confusion vulnerability which can potentially lead to a privilege escalation. Description: The Intel® Content Protection HECI Service has a Type Confusion vulnerability which potentially can lead to a privilege escalation. The HECI service software is distributed as part of the Inte...
Intel Content Protection HECI Service - Type Confusion Privilege Escalation Exploit
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1358 Intel Content Protection HECI Service Type Confusion EoP Platform: Tested on Windows 10, service version 9.0.2.117 Class: Elevation of Privilege Summary: The Intel Content...
Intel Content Protection HECI Service - Type Confusion Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1358 Intel Content Protection HECI Service Type Confusion EoP Platform: Tested on Windows 10, service version 9.0.2.117 Class: Elevation of Privilege Summary: The Intel Content Protection HECI Service exposes a DCOM object to all...
Intel Content Protection HECI Service - Type Confusion Privilege Escalation
Intel Content Protection HECI Service - Type Confusion Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1358 Intel Content Protection HECI Service Type Confusion EoP Platform: Tested on Windows 10, service version 9.0.2.117 Class: Elevation of Privilege...
Intel Graphics Driver Content Protection HECI Service Local Elevation of Privilege Vulnerability
Intel Graphics Driver is an integrated graphics driver developed by Intel Corporation.Content Protection HECI Service is one of the content protection services. A local elevation of privilege vulnerability exists in the Content Protection HECI Service in Intel Graphics Driver. An attacker can...
CVE-2017-5717
Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access...
Type confusion
Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access...
CVE-2017-5717
Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access...
Buffer overflow
If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application TA in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory...
Microsoft Edge browser vulnerability, which allows attackers to compromise the confidentiality of information
The vulnerability of Microsoft Edge’s Content Protection Scheme CSP is related to deficiencies in access control. Exploiting this vulnerability allows attackers to force users to download malicious web pages...
CVE-2016-10237
If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application TA in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory...
Android HDCP Denial of Service Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. Android HDCP denial-of-service vulnerability exists because the encrypt interface provided by the HDCP service High-bandwidth Digital Content Protection does not perform strict paramet...
A vulnerability in the Mozilla SeaMonkey software product, which allows a malicious individual to execute arbitrary code.
Mozilla SeaMonkey’s software product contains a vulnerability related to an implementation error in the content protection policy when working with XSLT style sheets. Exploiting this vulnerability allows malicious actors to execute arbitrary XSLT code, despite the insufficient restrictions impose...
The vulnerability of the Firefox browser, which allows a malicious actor to execute arbitrary code
The Mozilla Firefox browser contains a vulnerability related to a implementation error in the content protection policy when working with XSLT style sheets. Exploiting this vulnerability allows malicious actors to execute arbitrary XSLT code, using insufficient restrictions imposed by the style-s...
Microsoft Edge browser’s vulnerability, which allows a hacker to bypass content protection policies
The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass content protection policies using a specially crafted document...
MGASA-2015-0414 Updated iceape/sqlite3 packages fix security vulnerabilities
Updated iceape packages fix security issues. The sqlite3 package has been updated as well since the new iceape version requires the SQLITEENABLEDBSTATVTAB feature to be enabled in sqlite. This sqlite3 update also enables ICU support, fixing bug 16814 . Use-after-free vulnerability in the...
Updated iceape/sqlite3 packages fix security vulnerabilities
Updated iceape packages fix security issues. The sqlite3 package has been updated as well since the new iceape version requires the SQLITEENABLEDBSTATVTAB feature to be enabled in sqlite. This sqlite3 update also enables ICU support, fixing bug 16814 . Use-after-free vulnerability in the...
CVE-2015-4483
Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request...
