RHEL 6 : kernel (RHSA-2016:1225)

An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

The vulnerability of the Network Security Services library allows a perpetrator to trigger a service failure or exert other effects.

The vulnerability of the ssl3HandleECDHServerKeyExchange function in the Network Security Services library is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service failures or other effects when establishing an SSL connection...

FreeBSD : NSS -- multiple vulnerabilities (c4292768-5273-4f17-a267-c5fe35125ce4)

Mozilla Foundation reports : Security researcher Francis Gabriel reported a heap-based buffer overflow in the way the Network Security Services NSS libraries parsed certain ASN.1 structures. An attacker could create a specially crafted certificate which, when parsed by NSS, would cause it to cras...

Microsoft Internet Explorer Memory Error Reference Remote Code Execution Vulnerability (CNVD-2016-01536)

Internet Explorer is a web browser from Microsoft. A vulnerability in the handling of "range" type HTML input elements in some versions of Internet Explorer can be exploited by an attacker with a malicious web page or file to reuse a freed memory structure to execute arbitrary code in the context...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a multi-level PDF document...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.

The vulnerability of the Flash Player and Adobe Integrated Runtime software-related programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Video object...

OracleVM 3.3 : openldap (OVMSA-2015-0123)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-6908 openldap: bergetnext denial of service vulnerability 1263171 - fix: nslcd segfaults due to incorrect mutex initialization 1144294 - fix: Updating openldap deletes database if slapd.conf ...

Microsoft Windows Kernel - 'bGetRealizedBrush' Use-After-Free (MS15-097)

Source: https://code.google.com/p/google-security-research/issues/detail?id=458 --- The attached testcase crashes Win 7 with Special Pool on win32k while accessing freed memory in bGetRealizedBrush. --- Proof of Concept:...

Microsoft Office Excel table Tag Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to read freed memory on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of...

The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Flash Player software exists due to the access to memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or execute arbitrary code...

mod_wsgi: information leak

modwsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread...

Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2014) - Windows

Adobe Acrobat is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Fedora 17 : xen-4.1.4-7.fc17 (2013-4927)

make xendomains systemd script executable 919705, Potential use of freed memory in event channel operations XSA-47, CVE-2013-1920 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically cle...

Adobe Flash Player Multiple Vulnerabilities -02 Feb13 (Linux)

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvuln02feb13lin.nasl 6086 2017-05-09 09:03:30Z teissa $ Adobe Flash Player Multiple Vulnerabilities -02 Feb13 Linux Authors: Thanga Prakash S Copyright:...

Microsoft Internet Explorer selection.empty Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer vgx.dll imagedata Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within vgx.dll while...

SuSE 11 Security Update : Mozilla (SAT Patch Number 1328)

This update brings the Mozilla XULRunner engine to the 1.9.0.14 stable release. It also fixes various security issues : - / CVE-2009-30 /. MFSA 2009-47 / CVE-2009-3069 / CVE-2009-3070 / CVE-2009-3071 / CVE-2009-3072 / CVE-2009-3073 - Mozilla developers and community members identified and fixed...

SuSE 11 Security Update : krb5 (SAT Patch Number 2235)

Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

USN-943-1: Thunderbird vulnerabilities

Martin Barbella discovered an integer overflow in an XSLT node sorting routine. An attacker could exploit this to overflow a buffer and cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2010-1199 An integer overflow was discover...

Use-after-free error in nsCycleCollector::MarkRoots() — Mozilla

Security researcher wushi of team509 reported that the frame construction process for certain types of menus could result in a menu containing a pointer to a previously freed menu item. During the cycle collection process, this freed item could be accessed, resulting in the execution of a section...