DEBIAN-CVE-2017-1000409

A buffer overflow in glibc 2.5 released on September 29, 2006 and can be triggered through the LDLIBRARYPATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366...

glibc buffer overflow vulnerability (CNVD-2018-04663)

glibc a.k.a. GNU C Library, libc6 is an open-source, free C language compiler released under the LGPL license. A buffer overflow vulnerability exists in glibc version 2.5 because the program fails to properly resolve the LDLIBRARYPATH environment variable. A local attacker can use the LDLIBRARYPA...

UBUNTU-CVE-2017-1000409

A buffer overflow in glibc 2.5 released on September 29, 2006 and can be triggered through the LDLIBRARYPATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366...

PT-2017-4207

Name of the Vulnerable Software and Affected Versions glibc version 2.5 Description The issue is related to a buffer overflow that can be triggered through the LD LIBRARY PATH environment variable. This allows an attacker to access confidential data, compromise its integrity, and cause a denial o...

Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Overview Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this...

UBUNTU-CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

CVE-2017-4921

VMware vCenter Server 6.5 prior to 6.5 U1 contains an insecure library loading issue that occurs due to the use of LDLIBRARYPATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation...

PT-2017-16204

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 6.5 prior to 6.5 U1 Description The issue is related to an insecure library loading problem due to the unsafe use of the LD LIBRARY PATH variable. This could allow unprivileged host users to load a shared library...

Installer of LhaForge may insecurely load Dynamic Link Libraries

Overview LhaForge is a file compression/decompression software. The installer of LhaForge contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with t...

glibc: heap/stack gap jumping via unbounded stack allocations

A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap or different memory region and stack memory regions were adjacent to each other, an attacker could use this flaw to jump over the stack guard gap, cause controlled memory corruption on process sta...

glibc: heap/stack gap jumping via unbounded stack allocations

A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap or different memory region and stack memory regions were adjacent to each other, an attacker could use this flaw to jump over the stack guard gap, cause controlled memory corruption on process sta...

glibc: heap/stack gap jumping via unbounded stack allocations

A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap or different memory region and stack memory regions were adjacent to each other, an attacker could use this flaw to jump over the stack guard gap, cause controlled memory corruption on process sta...

DEBIAN-CVE-2017-1000366

glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap...

UBUNTU-CVE-2017-1000366

glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap...

PT-2017-4267

Name of the Vulnerable Software and Affected Versions glibc versions 2.25 and earlier Description The issue is related to a buffer overflow in memory, allowing an attacker to access confidential data, compromise its integrity, and cause a denial of service. Additionally, it is possible to...

Foxit Reader < 7.3.0 Multiple Vulnerabilities

Binary data 9467.prm...

The vulnerability of the Microsoft Office software allows a malicious attacker to execute arbitrary code.

A vulnerability in Microsoft Office software, related to errors in checking the path of dynamically loaded libraries. Exploiting this vulnerability allows a malicious attacker to execute arbitrary code contained in the dynamic library located in the document’s open directory...

HawtJNI: predictable temporary file name leading to local arbitrary code execution

The HawtJNI Library class wrote native libraries to a predictable file name in /tmp when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJN...

Updated hawtjni packages fix security vulnerability

The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJ...

QNX 6.2/6.3 - Multiple Local Privilege Escalation and Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16539/info QNX is susceptible to multiple local vulnerabilities. These issues include multiple buffer-overflow vulnerabilities, a format-string vulnerability, an insecure library-path vulnerability, insecure...