GNU glibc Stack Buffer Overflow Vulnerability

GNU glibc is an open source, free C compiler released under the LGPL license. A stack buffer overflow vulnerability exists in GNU glibc that could be exploited by an attacker to crash an application or execute arbitrary code...

Google Chrome Denial of Service Vulnerability (CNVD-2016-00722)

Google Chrome is a web browser. Google V8 is one of the open source JavaScript engines. A security vulnerability exists in Google Chrome that allows remote attackers to build malicious web pages that can be exploited to trick users into parsing, which can crash applications...

Huawei Smart Phones Local Denial of Service Vulnerability

Huawei Smart Phones are a smartphone from the Chinese company Huawei. A security vulnerability exists in Huawei Smart Phones that allows attackers to conduct denial-of-service attacks by exploiting the vulnerability to crash applications...

Microsoft Edge Arbitrary Code Execution Vulnerability

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security vulnerability in Microsoft Edge's Chakra JavaScript engine allows a remote attacker to build special WEB pages that can be tricked into parsing by user...

IBM MQ Light Denial of Service Vulnerability (CNVD-2016-00011)

IBM MQ Light is a messaging service based on IBM Bluemix. A remote security vulnerability exists in IBM MQ Light, which allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability to crash applications...

Android 'PPP Character Device Driver' Local Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. Android suffers from a local denial-of-service vulnerability that allows attackers to exploit the vulnerability to crash applications...

Google Chrome suffers from an unspecified vulnerability (CNVD-2015-06765)

Google Chrome is an open source WEB browser. Google has multiple unspecified security vulnerabilities that allow remote attackers to exploit vulnerabilities to build malicious WEB pages, trick users into parsing them, crash applications, and more...

Google Chrome has multiple unspecified vulnerabilities (CNVD-2015-05858)

Google Chrome is a WEB-based browser. Google Chrome has multiple unspecified vulnerabilities that allow remote attackers to construct malicious WEB pages and trick users into parsing them, which can crash applications or execute arbitrary code...

Google V8 suffers from an unspecified vulnerability (CNVD-2015-05802)

Google Chrome is a WEB-based browser. A security vulnerability in the Google Chrome V8 engine allows remote attackers to construct malicious WEB pages that can be tricked into parsing by users, which can crash applications or execute arbitrary code...

OpenStack Neutron Denial of Service Vulnerability (CNVD-2015-04539)

OpenStack Neutron is a networking module for OpenStack that accommodates a large number of plug-ins that handle integration with other networking services. A denial-of-service vulnerability exists in OpenStack Neutron, which allows attackers to exploit this vulnerability to crash applications and...

Apple OS X Intel Graphics Card Driver Buffer Overflow Vulnerability (CNVD-2015-04218)

Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a buffer overflow issue with the Intel graphics driver, allowing attackers to exploit the vulnerability to crash applications or execute arbitrary code...

Apple OS X Intel Graphics Card Driver Buffer Overflow Vulnerability (CNVD-2015-04272)

Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a buffer overflow issue with the Intel graphics driver, allowing attackers to exploit the vulnerability to crash applications or execute arbitrary code...

IBM Unified Extensible Firmware Interface Denial of Service Vulnerability

The IBM Unified Extensible Firmware Interface is a standard detailing type interfaces for operating systems to automatically load from a pre-booted operating environment, to an operating system that simplifies the boot process and saves time. A security vulnerability exists in IBM Unified...

PHP Null Pointer Indirect Reference Denial of Service Vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. PHP suffers from a null pointer indirect reference vulnerability in its implementation, which can be exploited by an attacker to crash an affected application...

Multiple Buffer Overflow Vulnerabilities in WESP SDK 'WESPConfig' ActiveX

The WESP SDK is a standard library for the Webgate Technology Embedded Standard Protocol. The WESP SDK 'WESPConfig' ActiveX suffers from a buffer overflow that allows attackers to construct malicious WEB pages and trick users into parsing them, which can crash applications or execute arbitrary co...

Apple TV and iOS XML Parser Buffer Overflow Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A buffer overflow vulnerability exists in the processing of XML files in App...

SuSE 10 Security Update : icu (ZYPP Patch Number 7928)

The following bug has been fixed : - An integer overflow in the getSymbol function could crash applications using icu. CVE-2010-4409 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 11.1 Security Update : freetype2 (SAT Patch Number 4089)

Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : glibc, eglibc vulnerabilities (USN-944-1)

Maksymilian Arciemowicz discovered that the GNU C library did not correctly handle integer overflows in the strfmon function. If a user or automated system were tricked into processing a specially crafted format string, a remote attacker could crash applications, leading to a denial of service...

Mandriva Update for libxrender MDVA-2010:038 (libxrender)

Check for the Version of libxrender OpenVAS Vulnerability Test Mandriva Update for libxrender MDVA-2010:038 libxrender Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...