CVE-2017-11652

Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file...

PT-2017-17942

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 55 Description The issue affects Windows systems, where non-null-terminated strings copied into the crash reporter for specific registry keys can lead to the exposure of private data from the local system. This is due...

Mac OS X Privilege Escalation

The vulnerability of the Crash Reporter component in the Mac OS X operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

Apple OS X El Capitan Crash Reporter Arbitrary Code Execution Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. A security vulnerability in Apple OS X El CapitanCrash Reporter allows attackers to exploit the vulnerability to execute arbitrary code with root privileges...

CVE-2016-1806

Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1806

Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app...

Design/Logic Flaw

Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1806

Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1806: Improper Access Control

Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app...

PT-2016-2059

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.5 Description The issue is related to the Crash Reporter component in Apple OS X, which has inadequate access control. This allows attackers to execute arbitrary code in a privileged context via a crafted app...

Mozilla Firefox for Android < 42.0 Multiple Vulnerabilities

Binary data 9019.prm...

CVE-2015-7190: Exposure of Sensitive Information to an Unauthorized Actor

The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML document...

Apport/Abrt Local Privilege Vulnerability

Apport is the crash report service on ubuntu, that is, when a program crashes the pop-up program that sends an error report. ABRT is an automated bug detection and reporting tool. Apport/Abrt is vulnerable to a local privilege exploit. An attacker can exploit the vulnerability to gain root...

CVE-2014-1506

Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service application crash, via a crafted application that specifies Android Crash Reporter...

CVE-2014-1506

Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service application crash, via a crafted application that specifies Android Crash Reporter...

CVE-2014-1506: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service application crash, via a crafted application that specifies Android Crash Reporter...

PT-2014-4212

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 28.0 on Android Description A directory traversal issue in the Android Crash Reporter component allows attackers to trigger the transmission of local files to arbitrary servers or cause a denial of service by...

Android Crash Reporter open to manipulation — Mozilla

Firefox for Android includes a Crash Reporter which sends crash data to Mozilla for analysis. Security researcher Roee Hay reported that third party Android applications could launch the crash reporter with their own arguments. Normally applications cannot read the private files of another...

Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)

Binary data 3947.prm...

Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.9 or a version of Mac OS X 10.3 which does not have Security Update 2007-003 applied. This update contains several security fixes for the following programs : - ColorSync - CoreGraphics - Crash Reporter - CUPS ...