Android libstagefright Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. libstagefright is one of the libraries that supports hardcoding. A remote code execution vulnerability exists in libstagefright in Android versions prior to 6.0 and prior to 6.0.1....

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-02058)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A remote code execution vulnerability exists in Android's Mediaserver. A remote attacker could exploit this...

gifcolor memory misreference vulnerability

gifcolor is a set of tools for setting the output of GIF files. A memory misreference vulnerability exists in gifcolor, which allows an attacker to submit a special file that can be exploited to trick an application into parsing it, resulting in repeated calls to EGifCloseFile...

Microsoft Office Arbitrary Code Execution Vulnerability (CNVD-2016-01008)

Microsoft Office is a suite of office software developed by Microsoft Corporation for the Microsoft Windows and Apple Macintosh operating systems. An arbitrary code execution vulnerability exists in Microsoft Office 2007 SP3, which allows remote attackers to execute arbitrary code via a crafted...

Microsoft Office Memory Corruption (MS16-015: CVE-2016-0053)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Office Memory Corruption (MS16-015: CVE-2016-0022)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Foxit Reader and Foxit PhantomPDF Arbitrary Code Execution Vulnerability

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF contain a security vulnerability that can be exploited by remote attackers to construct malicious files that can be parsed by the user, crashing the application or executing arbitrary...

WPS Office 2016 - .ppt drawingContainer Memory Corruption

WPS Office 2016 - .ppt drawingContainer Memory Corruption Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an...

SUSE-SU-2016:0284-1 Security update for php5

This update for php5 fixes the following issues: - CVE-2015-7803: Specially crafted .phar files with a crafted TAR archive entry allowed remote attackers to cause a Denial of Service DoS bsc949961 - CVE-2016-1903: Specially crafted image files could could allow remote attackers read unspecified...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00282)

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. Microsoft Windows fails to properly load DLL files, allowing attackers to exploit the vulnerability to build special files that can be tricked into parsing and...

Microsoft Office Memory Corruption (MS16-004: CVE-2016-0010)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Office Memory Corruption (MS16-004: CVE-2016-0035)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused when the Office software improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted office...

Wireshark RSL File Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. The disctrslipaccessmsg function in the Wireshark version 2.0.x prior to 2.0.1 and 1.12.x prior to 1.12.9 RSL parser epan/dissectors/packet-rsl.c fails to reject unknown TLV types, allowing a remote attacker to pass through a specially crafte...

SUSE-SU-2016:0011-1 Security update for libmspack

libmspack was updated to fix security issues. These security issues were fixed: CVE-2014-9732: The cabdextract function in cabd.c in libmspack did not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allowed remote attackers to cause a...

UBUNTU-CVE-2015-8736

The mp2tfindnextpcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service stack-based buffer overflow and application crash via a crafted file...

Apple OS X Media File Memory Corruption Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a memory corruption vulnerability in the handling of media files, which allows attackers to exploit the vulnerability to construct malicious files that can be tricked into being parsed by an application, which can...

Apple OS X Media File Handling Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X has a security vulnerability in the handling of media files, which allows attackers to exploit the vulnerability to construct malicious files that can be tricked into being parsed by applications, which can crash the application...

Microsoft Office Memory Corruption (MS15-128: CVE-2015-6106)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Office Memory Corruption (MS15-131: CVE-2015-6118)

A Memory corruption vulnerability exists in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted Word file...

Microsoft Office Memory Corruption (MS15-131: CVE-2015-6040)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...