binutils: invalid read flaw in libbfd

An integer overflow flaw was found in the way the strings utility processed certain files. If a user were tricked into running the strings utility on a specially crafted file, it could cause the strings executable to crash...

binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485)

It was found that the fix for the CVE-2014-8485 issue was incomplete: a heap-based buffer overflow in the objdump utility could cause it to crash or, potentially, execute arbitrary code with the privileges of the user running objdump when processing specially crafted files...

Microsoft Office Memory Corruption (MS15-116: CVE-2015-6091)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Windows Journal Heap Overflow (MS15-114: CVE-2015-6097)

A remote code execution vulnerability has been reported in Microsoft Windows Journal. The vulnerability is due to the way Windows Journal processes specially crafted jnt files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted jnt file...

SAP 3D Visual Enterprise Viewer Arbitrary Code Execution Vulnerability (CNVD-2015-07257)

SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A security vulnerability exists in SAP 3D Visual Enterprise Viewer VEV. The vulnerability can be exploited by a remote attacker t...

Foxit Reader and Foxit PhantomPDF memory corruption vulnerability (CNVD-2015-07174)

Foxit Reader is a PDF document reader.Foxit PhantomPDF is a business version of the application. A security vulnerability exists in Foxit Reader and Foxit PhantomPDF, which allows attackers to exploit this vulnerability to construct malicious files that can be tricked into parsing by the user,...

Info-ZIP UnZip Denial of Service Vulnerability

Info-ZIP UnZip is a set of Unix-based tools for decompressing the ".zip" file format. A security vulnerability in Info-ZIP UnZip allows an attacker to construct special files that can be parsed by an application, crashing the application or executing arbitrary code...

CVE-2015-8030

SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted 1 U3D, 2 LWO, 3 JPEG2000, or 4 FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities...

CVE-2015-8030

SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted 1 U3D, 2 LWO, 3 JPEG2000, or 4 FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities...

USN-2787-1 audiofile vulnerability

Fabrizio Gennari discovered that audiofile incorrectly handled changing both the sample format and the number of channels. If a user or automated system were tricked into processing a specially crafted file, audiofile could be made to crash, leading to a denial of service, or possibly execute...

Mageia: Security Advisory (MGASA-2015-0283)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office Memory Corruption (MS15-110: CVE-2015-2555)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Office Memory Corruption (MS15-110: CVE-2015-2558)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Office Memory Corruption (MS15-110: CVE-2015-2557)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

PYSEC-2015-25

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...

PYSEC-2015-27

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...

CVE-2015-7337

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types...

Microsoft Office Memory Corruption (MS15-99: CVE-2015-2523)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

MGASA-2015-0329 Updated vlc packages fix security vulnerabilities

Loren Maggiore of Trail of Bits discovered that the 3GP parser of VLC, a multimedia player and streamer, could dereference an arbitrary pointer due to insufficient restrictions on a writable buffer. This could allow remote attackers to execute arbitrary code via crafted 3GP files CVE-2015-5949...

Debian DSA-3342-1 : vlc - security update

Loren Maggiore of Trail of Bits discovered that the 3GP parser of VLC, a multimedia player and streamer, could dereference an arbitrary pointer due to insufficient restrictions on a writable buffer. This could allow remote attackers to execute arbitrary code via crafted 3GP files. %NASLMINLEVEL...