CVE-2010-3958: Improper Input Validation

The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET application, or 3 a crafted .NET Framework...

Microsoft .NET Framework Remote Code Execution Vulnerability (2484015)

This host is missing a critical security update according to Microsoft Bulletin MS11-028. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft .NET Framework Remote Code Execution Vulnerability (2484015)

This host is missing a critical security update according to Microsoft Bulletin MS11-028. OpenVAS Vulnerability Test $Id: secpodms11-028.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2484015 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

MS11-028: Vulnerability in .NET Framework Could Allow Remote Code Execution (2484015)

The x86 JIT compiler included with the version of the .NET Framework installed on the remote host incorrectly compiles certain types of function calls. An attacker may be able to leverage this vulnerability to run arbitrary code on the affected system under either of the following scenarios : -...

Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution

Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution source: https://www.securityfocus.com/bid/47834/info The Microsoft .NET Framework is prone to a remote code-execution vulnerability that affects the Just-In-Time JIT compiler optimization on x86 architectures...

Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution

source: https://www.securityfocus.com/bid/47834/info The Microsoft .NET Framework is prone to a remote code-execution vulnerability that affects the Just-In-Time JIT compiler optimization on x86 architectures. Successful exploits may allow an attacker to execute arbitrary code in the context of t...

Fedora 13 : clamav-0.96.5-1300.fc13 (2010-18564)

Sat Dec 4 2010 Enrico Scholz - 0.96.5-1300 - updated to 0.96.5 - CVE-2010-4260 Multiple errors within the processing of PDF files can be exploited to e.g. cause a crash. - CVE-2010-4261 An off-by-one error within the 'iconcb' function can be exploited to cause a memory corruption. - Sun Oct 31...

CVE-2010-3228

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

Memory corruption

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

CVE-2010-3228

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

CVE-2010-3228

The CVE-2010-3228 issue is a remote code execution vulnerability in the .NET Framework 4.0 JIT compiler on x64/Itanium. The root cause is incorrect optimizations in the JIT that lead to memory corruption when XBAPs or specially crafted Web content are processed. Exploitation requires a user to vi...

CVE-2010-3228: Improper Control of Generation of Code

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

MS10-077: Vulnerability in .NET Framework Could Allow Remote Code Execution (2160841)

The JIT compiler included with the version of the .NET Framework installed on the remote host optimizes code based on an incorrect assessment. If an attacker can trick a user on the affected host into viewing a specially crafted web page using a Web browser that can run XAML Browser Applications...

Mozilla Foundation Security Advisory 2009-41

Mozilla Foundation Security Advisory 2009-41 Title: Corrupt JIT state after deep return from native function Impact: Critical Announced: July 16, 2009 Reporter: zbyte Products: Firefox 3.5 Fixed in: Firefox 3.5.1 Description Firefox user zbyte reported a crash that we determined could result in a...

Firefox 3.5.x < 3.5.1 Multiple Vulnerabilities

Firefox 3.5 is installed on the remote host. This version is potentially affected by multiple flaws : - It may be possible to crash the browser or potentially execute arbitrary code by using a flash object that presents a slow script dialog. MFSA 2009-35 - In certain cases after a return from a...

Corrupt JIT state after deep return from native function — Mozilla

Firefox user zbyte reported a crash that we determined could result in an exploitable memory corruption problem. In certain cases after a return from a native function, such as escape, the Just-in-Time JIT compiler could get into a corrupt state. This could be exploited by an attacker to run...

mozilla -- corrupt JIT state after deep return from native function

Mozilla Project reports: Firefox user zbyte reported a crash that we determined could result in an exploitable memory corruption problem. In certain cases after a return from a native function, such as escape, the Just-in-Time JIT compiler could get into a corrupt state. This could be exploited b...

Design/Logic Flaw

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...

CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...

Fedora 11 : webkitgtk-1.1.8-1.fc11 (2009-6166)

"WebKitGTK+ 1.1.8 contains many bug-fixes and updates including spell-checking support, enhanced error reporting, lots of ATK enhancements, support for copying images to the clipboard, and a new printing API since 1.1.5 that allows applications better control and monitoring of the printing proces...