Integer overflow

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service heap memory corruption or NULL pointer dereference or possibly have unspecified other impact via a long digit string that is mishandled by the 1 BNdec2bn or 2...

MGASA-2016-0094 Updated samba packages fix security vulnerabilities

Updated ldb and samba packages fix security vulnerabilities: A malicious client can send packets that cause the LDAP server in the samba daemon process to become unresponsive, preventing the server from servicing any other requests CVE-2015-3223. Versions of Samba from 3.0.0 to 4.3.2 inclusive ar...

CVE-2016-0797

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service heap memory corruption or NULL pointer dereference or possibly have unspecified other impact via a long digit string that is mishandled by the 1 BNdec2bn or 2...

CVE-2016-0797

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service heap memory corruption or NULL pointer dereference or possibly have unspecified other impact via a long digit string that is mishandled by the 1 BNdec2bn or 2...

Symantec Encryption Management Server (SEMS) Remote Denial of Service Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12 in the LDAP service. A remote attacker could cause a denial of service heap memory...

Memory corruption

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

CVE-2015-8149

The CVE-2015-8149 entry concerns Symantec Encryption Management Server (SEMS) LDAP service. Affects SEMS 3.3.2 prior to MP12; the LDAP service can be exploited remotely by sending crafted LDAP requests to trigger heap memory corruption and a service outage (DoS). The issue is described as a remot...

CVE-2015-8149

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

Adobe Photoshop CC & Bridge CC - '.png' File Parsing Memory Corruption (1)

Exploit for windows platform in category dos / poc Application: Adobe Photoshop CC & Bridge CC PNG file parsing memory corruption Platforms: Windows Versions: Bridge CC 6.1.1 and earlier versions Version: Photoshop CC 16.1.1 2015.1.1 and earlier versions CVE; 2016-0951 Author: Francis Provencher ...

Adobe Photoshop CC Bridge CC - .png Parsing Memory Corruption (2)

Adobe Photoshop CC Bridge CC - .png Parsing Memory Corruption 2 Application: Adobe Photoshop CC & Bridge CC PNG file parsing memory corruption Platforms: Windows Versions: Bridge CC 6.1.1 and earlier versions Version: Photoshop CC 16.1.1 2015.1.1 and earlier versions CVE; 2016-0952 Author: Franci...

libEBML Information Disclosure Vulnerability

libEBML is a C++ library for parsing EBML files maintained by the Matroska team. A security vulnerability in the 'EbmlUnicodeString::UpdateFromUTF8' function of libEBML allows an attacker to obtain sensitive information in process heap memory using specially crafted UTF-8 strings...

libMatroska Information Disclosure Vulnerability

libMatroska is a C++ library for parsing Matroska files. A security vulnerability in libMatroska's 'KaxInternalBlock::ReadData' function allows attackers to obtain sensitive information in process heap memory using specially crafted EBML lacing...

libEBML Information Disclosure Vulnerability (CNVD-2016-00840)

libEBML is a C++ library for parsing EBML files maintained by the Matroska team. A security vulnerability in the 'EbmlElement::ReadCodedSizeValue' function of libEBML allows an attacker to obtain sensitive information in the process heap memory using a specially crafted length value in a speciall...

WPS Office 2016 - .xls Heap Memory Corruption

WPS Office 2016 - .xls Heap Memory Corruption Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for...

WPS Office 2016 - .ppt Heap Memory Corruption

WPS Office 2016 - .ppt Heap Memory Corruption Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acrony...

WPS Office < 2016 - '.xls' Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym...

WPS Office < 2016 - '.ppt' Heap Memory Corruption

Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for Writer, Presentation and Spreadsheets,2...

WPS Office < 2016 - '.ppt' Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: WPS Office Platforms: Windows Versions: Version before 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an...

WPS Office < 2016 - '.xls' Heap Memory Corruption

Application: WPS Office Platforms: Windows Versions: Version 2016 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== WPS Office an acronym for Writer, Presentation and Spreadsheets,2...

DEBIAN-CVE-2015-8792

The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access...