Foxit Reader Out of Bounds Read Local Information Disclosure Vulnerability - Windows

Foxit Reader is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Boxoft Wav 1.0 - Buffer Overflow

Document Title: =============== Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2027 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 2027...

Boxoft Wav 1.0 - Buffer Overflow

Boxoft Wav 1.0 - Buffer Overflow Document Title: =============== Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2027 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID:...

Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability

Document Title: =============== Boxoft Wav v1.1.0.0 - Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2027 Release Date: ============= 2017-01-09 Vulnerability Laboratory ID VL-ID: ==================================== 2027...

PDfAdd DLL Hijacking Vulnerability

PDfAdd is a free geometric drawing tool. A DLL hijacking vulnerability exists in PDfAdd version 1.2, which can be exploited by local attackers to inject code or gain advanced access...

Free M4A To MP3 Converter 9.3 DLL Hijacking

===================================================== Exploit Title : Free M4a to MP3 Converter 9.3 - DLL Hijacking Vulnerability Date Discovered : 2016-12-19 Affected Products: Free M4a to MP3 Converter v9.3 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

Popcorn Time 5.6 DLL Hijacking

===================================================== Exploit Title : Popcorn Time 5.6 - DLL Hijacking Vulnerability Date Discovered : 2016-12-20 Affected Products: Popcorn Time v5.6 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

Nidesoft MP3 Converter 2.6.18 DLL Hijacking

===================================================== Exploit Title : Nidesoft MP3 Converter 2.6.18 - DLL Hijacking Vulnerability Date Discovered : 2016-12-22 Affected Products: Nidesoft MP3 Converter v2.6.18 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:3197-1)

This update for the Linux Kernel 3.12.60-5254 fixes several issues. The following security bugs were fixed : - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

SUSE-SU-2016:3183-1 Security update for Linux Kernel Live Patch 7 for SLE 12 SP1

This update for the Linux Kernel 3.12.62-6062 fixes several issues. The following security bugs were fixed: - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system arises from the improper handling of NTLM password change requests. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s virtual hard disk driver stems from an improper restriction on access to files. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

Apple OS X AppleGraphicsPowerManagement Null Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

SUSE-SU-2016:3117-1 Security update for Linux Kernel Live Patch 5 for SLE 12 SP1

This update for the Linux Kernel 3.12.59-6041 fixes several issues. The following security bugs were fixed: - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

SUSE-SU-2016:3112-1 Security update for Linux Kernel Live Patch 12 for SLE 12

This update for the Linux Kernel 3.12.55-5242 fixes several issues. The following security bugs were fixed: - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

Microsoft Windows Kernel CVE-2016-7258 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems...

SUSE-SU-2016:3096-1 Security update for Linux Kernel Live Patch 6 for SLE 12 SP1

This update for the Linux Kernel 3.12.59-6045 fixes several issues. The following security bugs were fixed: - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

Intel Wireless Bluetooth Driver Unreferenced Service Path Vulnerability

Intel Wireless Bluetooth driver is a set of drivers for wireless bluetooth devices from Intel. A non-referenced service path vulnerability exists in the Intel Wireless Bluetooth driver prior to version 18.1.1607.3129. A local attacker can exploit this vulnerability to execute unauthorized code wi...

GLSA-201612-28 : Docker: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201612-28 Docker: Privilege escalation Docker does not properly distinguish between numeric UIDs and string usernames. Impact : Local attackers could possibly escalate their privileges. Workaround : There is no known workaround at...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3049-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive critical security fixes. The following security bugs were fixed : - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012754. -...