Apple OS X QuickTime Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X Quartz Composer Framework Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability in the Apple OS X Quartz Composer Framework's handling of QuickTime files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by an application, whic...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05380)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05376)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05382)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple iOS ImageIO Memory Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory incorrect initialization vulnerability exists in Apple iOS ImageIO's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct special files that can be parse...

Apple iOS DMG File Handling Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability in the handling of DMG files in Apple iOS allows local attackers to exploit the vulnerability to construct special files that can be tricked into parsing by the user, whi...

Design/Logic Flaw

The Hostmaster Aegir module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote attackers to execute arbitrary PHP code via a crafted file in the directory used to write Apache vhost files for hosted sites in a multi-site environment...

Microsoft Office Memory Corruption (MS15-081: CVE-2015-2468)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Updated wesnoth packages fix security vulnerability

Toom Lõhmus discovered that the Lua API and preprocessor in the Battle for Wesnoth game up to version 1.12.2 included could lead to client-side authentication information disclosure using maliciously crafted files with the .pdb extension CVE-2015-5069, CVE-2015-5070. This issue has been fixed usi...

Updated wesnoth packages fix security vulnerability

Toom Lõhmus discovered that the Lua API and preprocessor in the Battle for Wesnoth game up to version 1.12.2 included could lead to client-side authentication information disclosure using maliciously crafted files with the .pdb extension CVE-2015-5069, CVE-2015-5070. This issue has been fixed in...

chromium-browser: Settings allowed executable files to run immediately after download in unsepcified

Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to...

Microsoft Office Memory Corruption (MS15-070: CVE-2015-2380)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsec e-Szigno XML Digital Signature Forgery Security Bypass Vulnerability

Microsec e-Szigno is a suite of electronic signature authentication applications. Microsec e-Szigno does not validate the signature of specially crafted XML files, allowing attackers to bypass XML digital signature validation by performing man-in-the-middle attacks to forge XML file content and...

KMPlayer Stack Buffer Overflow Vulnerability

KMPlayer is a video player based on Linux, UNIX operating system. KMPlayer suffers from a remote stack buffer overflow vulnerability that allows remote attackers to construct malicious files and trick users into parsing them, which could crash the application or execute arbitrary code...

The vulnerability of the Mail Dealer mail server allows a hacker to inject arbitrary web scripts or HTML code.

The vulnerability of the Mail Dealer mail server arises from the failure to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code through a specially created file...

Unspecified Vulnerability in Apple QuickTime QT Media Foundation (CNVD-2015-04328)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in QT Media Foundation in Apple QuickTime versions prior to 7.7.7. The vulnerability...

Unspecified Vulnerability in Apple QuickTime QT Media Foundation

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in QT Media Foundation in Apple QuickTime versions prior to 7.7.7. The vulnerability...

Memory corruption

QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3664 and CVE-2015-3665...

CVE-2015-3666

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663,...