3676 matches found
CVE-2015-5330
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading 1 an error message ...
Information disclosure
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading 1 an error message ...
CVE-2015-5330
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading 1 an error message ...
UBUNTU-CVE-2015-5330
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading 1 an error message ...
CVE-2015-5330
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading 1 an error message ...
Adobe Flash Player Heap Memory Buffer Overflow Vulnerability (CNVD-2015-08231)
Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A heap buffer overflow vulnerability exists in Adobe Flash Player's handling of specia...
libxml2: out-of-bounds memory access when parsing an unclosed HTML comment
It was discovered that libxml2 could access out-of-bounds memory when parsing unclosed HTML comments. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose heap memory contents...
CVE-2015-8479
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audiooutputdevice.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by triggering access to an...
Design/Logic Flaw
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audiooutputdevice.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by triggering access to an...
CVE-2015-8479
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audiooutputdevice.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by triggering access to an...
CVE-2015-8479
Removed by vendor...
CVE-2015-8479
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audiooutputdevice.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by triggering access to an...
CVE-2015-8364
Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...
CVE-2015-8363
The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...
CVE-2015-8364
Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...
CVE-2015-8364
CVE-2015-8364 is a vulnerability in FFmpeg’s libavcodec/ivi.c (ff_ivi_init_planes) where an integer overflow can occur due to crafted Indeo Video Interactive dimensions. Affected FFmpeg branches include 2.6 before 2.6.5, 2.7.x before 2.7.3, and 2.8.x before 2.8.2. The issue enables remote attacke...
CVE-2015-5225
Buffer overflow in the vncrefreshserversurface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service heap memory corruption and process crash or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the serve...
Buffer overflow
Buffer overflow in the vncrefreshserversurface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service heap memory corruption and process crash or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the serve...
CVE-2015-5225
Buffer overflow in the vncrefreshserversurface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service heap memory corruption and process crash or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the serve...
CVE-2015-5225
CVE-2015-5225 : In QEMU, a heap-based buffer overflow arises in the vnc_refresh_server_surface() function of the VNC display driver. A local attacker within the guest could exploit this to cause heap memory corruption and host process crash, or possibly execute arbitrary code on the host. The pro...