CVE-2016-1964

Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by leveraging mishandling of XML transformations...

Integer overflow

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service heap memory corruption or NULL pointer dereference or possibly have unspecified other impact via a long digit string that is mishandled by the 1 BNdec2bn or 2...

MGASA-2016-0094 Updated samba packages fix security vulnerabilities

Updated ldb and samba packages fix security vulnerabilities: A malicious client can send packets that cause the LDAP server in the samba daemon process to become unresponsive, preventing the server from servicing any other requests CVE-2015-3223. Versions of Samba from 3.0.0 to 4.3.2 inclusive ar...

CVE-2016-0797

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service heap memory corruption or NULL pointer dereference or possibly have unspecified other impact via a long digit string that is mishandled by the 1 BNdec2bn or 2...

CVE-2016-0797

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service heap memory corruption or NULL pointer dereference or possibly have unspecified other impact via a long digit string that is mishandled by the 1 BNdec2bn or 2...

Symantec Encryption Management Server (SEMS) Remote Denial of Service Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12 in the LDAP service. A remote attacker could cause a denial of service heap memory...

Memory corruption

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

CVE-2015-8149

The CVE-2015-8149 entry concerns Symantec Encryption Management Server (SEMS) LDAP service. Affects SEMS 3.3.2 prior to MP12; the LDAP service can be exploited remotely by sending crafted LDAP requests to trigger heap memory corruption and a service outage (DoS). The issue is described as a remot...

CVE-2015-8149

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

Adobe Photoshop CC & Bridge CC - '.png' File Parsing Memory Corruption (1)

Exploit for windows platform in category dos / poc Application: Adobe Photoshop CC & Bridge CC PNG file parsing memory corruption Platforms: Windows Versions: Bridge CC 6.1.1 and earlier versions Version: Photoshop CC 16.1.1 2015.1.1 and earlier versions CVE; 2016-0951 Author: Francis Provencher ...

Adobe Photoshop CC Bridge CC - .png Parsing Memory Corruption (2)

Adobe Photoshop CC Bridge CC - .png Parsing Memory Corruption 2 Application: Adobe Photoshop CC & Bridge CC PNG file parsing memory corruption Platforms: Windows Versions: Bridge CC 6.1.1 and earlier versions Version: Photoshop CC 16.1.1 2015.1.1 and earlier versions CVE; 2016-0952 Author: Franci...

libEBML Information Disclosure Vulnerability

libEBML is a C++ library for parsing EBML files maintained by the Matroska team. A security vulnerability in the 'EbmlUnicodeString::UpdateFromUTF8' function of libEBML allows an attacker to obtain sensitive information in process heap memory using specially crafted UTF-8 strings...

libMatroska Information Disclosure Vulnerability

libMatroska is a C++ library for parsing Matroska files. A security vulnerability in libMatroska's 'KaxInternalBlock::ReadData' function allows attackers to obtain sensitive information in process heap memory using specially crafted EBML lacing...

libEBML Information Disclosure Vulnerability (CNVD-2016-00840)

libEBML is a C++ library for parsing EBML files maintained by the Matroska team. A security vulnerability in the 'EbmlElement::ReadCodedSizeValue' function of libEBML allows an attacker to obtain sensitive information in the process heap memory using a specially crafted length value in a speciall...

WPS Office 2016 - .xls Heap Memory Corruption

WPS Office 2016 - .xls Heap Memory Corruption Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for...

WPS Office 2016 - .ppt Heap Memory Corruption

WPS Office 2016 - .ppt Heap Memory Corruption Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acrony...

WPS Office < 2016 - '.xls' Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym...

WPS Office < 2016 - '.ppt' Heap Memory Corruption

Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for Writer, Presentation and Spreadsheets,2...

WPS Office < 2016 - '.ppt' Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an...

WPS Office < 2016 - '.xls' Heap Memory Corruption

Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for Writer, Presentation and Spreadsheets,2...