CVE-2017-8716: Undefined Security Weakness

Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability"...

Microsoft Windows Control Flow Guard Security Bypass Vulnerability

Microsoft Windows 10 is a next-generation cross-platform operating system released by Microsoft for PCs and laptops, tablets, and cell phones.Control Flow Guard is one of the Control Flow Protection components. A security bypass vulnerability exists in Control Flow Guard in Microsoft Windows 10...

Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows Control Flow Guard mishandles objects in memory. To exploit the vulnerability, an attacker could run a specially crafted application to bypass Control Flow Guard. The security update addresses the vulnerability by correcting how Windows...

PT-2017-18495

Name of the Vulnerable Software and Affected Versions Windows 10 Version 1703 Description A security-feature bypass issue exists due to the way that Control Flow Guard handles objects in memory. This allows an attacker to run a specially crafted application to bypass Control Flow Guard...

CVE-2017-14287

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "Read Access Violation on Control Flow starting at STDUJBIG2File+0x00000000000015eb."...

74cms the latest version of a arbitrary file read

Any file read in C:\phpStudy\WWW\Application\Home\Controller\MembersController.class.php中的 saveavatar function ! Can be seen in Section 646 row, using the copy Function, the$path the file contents is copied to$filename. In the 638 exercise with$avatar splice form$path,in the first 643 and 644 lin...

Unspecified Vulnerability in Google Android Qualcomm Component (CNVD-2017-27868)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An unspecified vulnerability exists in the Google Android Qualcomm component, where disabling...

CVE-2014-9971

In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow...

Buffer overflow

In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow...

CVE-2014-9971

In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow...

CVE-2014-9971: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow...

Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11260)

A memory corruption vulnerability exists in Adobe Acrobat And Reader. The vulnerability is due to an error in the image conversion engine when processing Enhanced Metafile Format EMF private data. A remote attacker may exploit this vulnerability by using the out of bounds access for unintended...

Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-3122)

A Memory Corruption exists in Enhanced Metafile Format. The vulnerability is due to insufficient bounds check while processing EMF file. Attacker can exploit the vulnerability by using the out of bounds access for unintended reads, writes or frees potentially leading to code corruption,...

Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-3123)

A Memory Corruption exists in Enhanced Metafile Format. The vulnerability is due to insufficient bounds check while processing EMF file. Attacker can exploit the vulnerability by using the out of bounds access for unintended reads, writes or frees potentially leading to code corruption,...

Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11245)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while processing Enhanced Metafile Format EMF data. A remote attacker may exploit this vulnerability by using the out of bounds access for unintended reads, write...

Adobe Acrobat And Reader Use After Free (APSB17-24: CVE-2017-11223)

A use after free vulnerability exists in Adobe Acrobat And Reader. The vulnerability is due to a freed memory area being reused by another object. This provides a remote attacker with an unintended memory access -- potentially leading to code corruption, control-flow hijack, or information leak...

Adobe Acrobat And Reader Memory Corruption (APSB17-24: CVE-2017-11259)

A memory corruption vulnerability exists in Adobe Acrobat And Reader. The vulnerability is due to an error in the image conversion engine when processing Enhanced Metafile Format EMF private data. A remote attacker may exploit this vulnerability by using the out of bounds access for unintended...

Adobe Acrobat And Reader Memory Corruption (APSB17-24: CVE-2017-11226)

A memory corruption vulnerability exists in Adobe Acrobat And Reader. The vulnerability is due to an error in the image processing engine when processing JPEG 2000 JP2 code stream data. A remote attacker may exploit this vulnerability by using a crafted JP2 file that contains large values for til...

CVE-2017-11722

The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging...

CVE-2017-11722

The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging...