CVE-2015-3335

The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandboxlinux/naclsandboxlinux.cc in Google Chrome before 42.0.2311.90 does not have RLIMITAS and RLIMITDATA limits for Native Client aka NaCl processes, which might make it easier for remote attackers to conduct...

CVE-2015-3335

The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandboxlinux/naclsandboxlinux.cc in Google Chrome before 42.0.2311.90 does not have RLIMITAS and RLIMITDATA limits for Native Client aka NaCl processes, which might make it easier for remote attackers to conduct...

CVE-2015-3335

Removed by vendor...

CVE-2015-3335

CVE-2015-3335 affects Google Chrome up to version 42.0.2311.90, where the NaClSandbox::InitializeLayerTwoSandbox function in NaCl sandbox Linux did not apply RLIMIT_AS and RLIMIT_DATA limits to NaCl processes. This could allow a remote attacker to run a crafted program in the NaCl sandbox to enab...

PT-2015-6158

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 42.0.2311.90 Description The issue is related to the NaClSandbox::InitializeLayerTwoSandbox function in Google Chrome, which does not have RLIMIT AS and RLIMIT DATA limits for Native Client NaCl processes. This...

CVE-2015-3335: Undefined Security Weakness

The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandboxlinux/naclsandboxlinux.cc in Google Chrome before 42.0.2311.90 does not have RLIMITAS and RLIMITDATA limits for Native Client aka NaCl processes, which might make it easier for remote attackers to conduct...

Row Hammer Privilege Escalation Vulnerability

On March 9, 2015, new research was published that takes advantage of a flaw in double data rate type 3 DDR3 synchronous dynamic random-access memory SDRAM to perform privilege escalation attacks on systems that contain the affected hardware. The flaw is known as Row Hammer. To attempt an attack,...

rubygem-hammer_cli_foreman: /etc/hammer/cli.modules.d/foreman.yml is world-readable

rubygem-hammercliforeman: File /etc/hammer/cli.modules.d/foreman.yml world readable...

hammer software metagauge 1.0.0.17 - Directory Traversal vulnerability

No description provided by source. Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest...

Hacking Crew Attacks German National Cyber Defense Center

Germany’s newly created National Cyber Defense Center was attacked by a group of hackers referring to themselves as the “n0n4m3 cr3w” No Name Crew in early July, according to a report from the IDG News Service. The group broke into the National Cyber Defense Center’s network and stole information...

[SECURITY] Fedora 13 Update: tuxguitar-1.2-3.fc13

TuxGuitar is a guitar tablature editor with player support through midi. It can display scores and multitrack tabs. Various features TuxGuitar provides inc lude autoscrolling while playing, note duration management, bend/slide/vibrato/ hammer-on/pull-off effects, support for tuplets, time signatu...

[SECURITY] Fedora 12 Update: tuxguitar-1.2-3.fc12

TuxGuitar is a guitar tablature editor with player support through midi. It can display scores and multitrack tabs. Various features TuxGuitar provides inc lude autoscrolling while playing, note duration management, bend/slide/vibrato/ hammer-on/pull-off effects, support for tuplets, time signatu...

Hammer Software MetaGauge 1.0.0.17 Directory Traversal Vulnerability

No description provided by source. Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest...

hammer-traversal.txt

Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...

Hammer Software MetaGauge 1.0.0.17 Directory Traversal Vulnerability

Exploit for unknown platform in category remote exploits ==================================================================== Hammer Software MetaGauge 1.0.0.17 Directory Traversal Vulnerability ==================================================================== Title: MetaGauge 1.0.0.17 Directo...

Hammer Software MetaGauge 1.0.0.17 - Directory Traversal

Hammer Software MetaGauge 1.0.0.17 - Directory Traversal Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the...

MetaGauge 1.0.0.17 Directory Traversal

Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...

Hammer Software MetaGauge 1.0.0.17 - Directory Traversal

Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...

CVE-2007-6468

Buffer overflow in the HuffDecode function in hwutils/hwrcon/huffman.c and hexenworld/Client/huffman.c in Hammer of Thyrion 1.4.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted huffman encoded packet. NOTE: some of these details are obtained from thir...

CVE-2007-6468

Buffer overflow in the HuffDecode function in hwutils/hwrcon/huffman.c and hexenworld/Client/huffman.c in Hammer of Thyrion 1.4.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted huffman encoded packet. NOTE: some of these details are obtained from thir...