CVE-2016-1464

Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375...

UBUNTU-CVE-2016-7534

The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...

WinSCP ftp client memory corruption vulnerability

WinSCP is a Windows environment using SSH open source graphical SFTP client . It also supports the SCP protocol. Its main function is to securely copy files between local and remote computers. A memory corruption vulnerability exists in WinSCP ftp client due to the software's lax input checking...

Microsoft Office Memory Corruption (MS16-099: CVE-2016-3313)

A memory corruption vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

RHEL 7 : libtiff (RHSA-2016:1546)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1546 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: Multiple flaws hav...

libtiff: Out-of-bounds reads followed by a crash in bmp2tiff

A flaw was discovered in the bmp2tiff utility. By tricking a user into processing a specially crafted file, a remote attacker could exploit this flaw to cause a crash or memory corruption and, possibly, execute arbitrary code with the privileges of the user running the libtiff tool...

The vulnerability of Symantec’s antivirus protection tools allows a hacker to cause a service failure or execute arbitrary codes.

The vulnerability of Symantec’s Decomposer antivirus protection system stems from a numerical overflow or buffer overflow. Exploiting this vulnerability allows an attacker to cause a service failure memory corruption or execute arbitrary code as a result of parsing specially crafted files...

Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on wit...

Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on wit...

Microsoft Office Memory Corruption (MS16-088: CVE-2016-3282)

A memory corruption vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Microsoft Office Memory Corruption (MS16-088: CVE-2016-3280)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

MS16-088: Security Update for Microsoft Office (3170008)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Office software due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by...

CVE-2016-3766

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service device hang or reboot via a crafted file...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-04639)

Android is a Linux-based open source operating system, and Mediaserver is one of its multimedia service components. A security vulnerability in Mediaserver on Android allows remote attackers to exploit the vulnerability to build special files that can be parsed by the user, which can be used to...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-04641)

Android is a Linux-based open source operating system, and Mediaserver is one of its multimedia service components. A security vulnerability in Mediaserver on Android allows remote attackers to exploit the vulnerability to build special files that can be parsed by the user, which can be used to...

The vulnerability of Microsoft Word text editors allows a malicious actor to execute arbitrary code with the privileges of the current user.

Microsoft Word’s text editor contains a vulnerability that can lead to system memory corruption due to errors occurring during the improper processing of specially crafted files. Exploiting this vulnerability could allow an unauthorized attacker to execute arbitrary code with privileges of the...

The vulnerability of the Microsoft Office software allows a malicious actor to execute arbitrary code with privileges of the current user.

The Microsoft Office suite contains a vulnerability related to errors that occur due to improper processing of specially crafted files. Exploiting this vulnerability could allow an unauthorized intruder to execute arbitrary code with privileges of the current user...

The vulnerability of Microsoft Word text editors allows a malicious actor to execute arbitrary code with the privileges of the current user.

Microsoft Word’s text editor contains a vulnerability related to errors that occur due to improper processing of specially crafted files. Exploiting this vulnerability can allow an unauthorized intruder to execute arbitrary code with privileges of the current user...

The vulnerability of the Microsoft Office software allows a malicious actor to execute arbitrary code with privileges of the current user.

Microsoft Office software contains a vulnerability that causes system memory corruption due to errors occurring during the improper processing of specially crafted files. Exploiting this vulnerability allows an unauthorized attacker to execute arbitrary code with privileges of the current user...

The vulnerability in the Microsoft Word Viewer software allows a malicious actor to execute arbitrary code with privileges of the current user.

The Microsoft Word Viewer program contains a vulnerability that can cause system memory corruption due to errors occurring during the improper processing of specially crafted files. Exploiting this vulnerability could allow an unauthorized attacker to execute arbitrary code with privileges of the...