PT-2015-5237

Name of the Vulnerable Software and Affected Versions Two Pilots Exif Pilot version 4.7.2 Description A buffer overflow issue exists in the Customize 35mm tab, allowing remote attackers to execute arbitrary code via a long string in the maker element in an XML file. Recommendations For version...

Google Chrome DOM memory misreference vulnerability (CNVD-2015-00701)

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A memory misreference vulnerability in the Element::detach function in the Google Chrome DOM implementation core/dom/Element.cpp allows an attacker to construct a malicious WEB page and trick a user into...

CVE-2014-7932

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updat...

CVE-2014-7929

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact...

Design/Logic Flaw

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updat...

CVE-2014-7929

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2014-7932

Removed by vendor...

CVE-2014-7932

CVE-2014-7932 is a use-after-free in Blink’s DOM implementation (Element::detach in core/dom/Element.cpp) used by Google Chrome before 40.0.2214.91. The vulnerability allows a remote attacker to cause a denial of service or potentially other impact via vectors involving pending updates of detache...

CVE-2014-7929

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2014-7932

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updat...

UBUNTU-CVE-2014-7932

Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updat...

UBUNTU-CVE-2014-7929

Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact...

PT-2015-3962

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Description A use-after-free issue in the HTMLScriptElement::didMoveToNewDocument function in the DOM implementation in Blink allows remote attackers to cause a denial of service or possibly have...

PT-2015-3965

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.91 Description A use-after-free issue exists in the Element::detach function within the DOM implementation in Blink. This could allow remote attackers to cause a denial of service or possibly have othe...

CVE-2014-8637

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

CVE-2014-8637

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

CVE-2014-8637: Exposure of Sensitive Information to an Unauthorized Actor

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

Corel Software DLL Hijacking

1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL:https://www.coresecurity.com/core-labs/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Date of last update: 2015-01-06 Vendors contacted: Corel Release mode: User release 2...

PT-2015-3581

Name of the Vulnerable Software and Affected Versions Hancom Office 2010 SE Description A buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a long string in the Text attribute in a TEXTART XML element in an HML file. Recommendations For Hancom Office 2010 SE, a...

PT-2015-4219

Name of the Vulnerable Software and Affected Versions NotePad++ version 6.6.9 Description A buffer overflow issue exists, allowing remote attackers to have an unspecified impact via a long Time attribute in an Event element in an XML file. Recommendations For NotePad++ version 6.6.9, at the momen...