Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968, CVE-2019-0977, CVE-2019-1009, CVE-2019-1010, CVE-2019-1011, CVE-2019-101...

CVE-2019-1047

CVE-2019-1047 describes an information disclosure in the Windows GDI component where memory contents are improperly disclosed. The root cause is how the GDI component handles objects in memory, allowing an attacker to obtain information that could aid further compromise. Exploitation vectors incl...

CVE-2019-1047 Windows GDI Information Disclosure Vulnerability

...

CVE-2019-1046

CVE-2019-1046 affects the Windows GDI component, where improper handling of memory allows information to be disclosed to an attacker. This vulnerability can be triggered by user actions such as opening a specially crafted document or visiting an untrusted webpage, leading to potential further com...

CVE-2019-1011 Windows GDI Information Disclosure Vulnerability

...

CVE-2019-1009

CVE-2019-1009 describes an information disclosure in the Windows GDI component where memory contents are improperly disclosed. The vulnerability can be exploited by convincing a user to open a specially crafted document or visit a crafted webpage, enabling an attacker to obtain sensitive informat...

CVE-2019-0977

CVE-2019-0977 concerns a memory disclosure in the Windows GDI component. The flaw allows an attacker to obtain memory contents to aid system compromise, with exploitation commonly via social engineering (convincing a user to open a crafted document or visit an untrusted webpage). The fixes are de...

Microsoft Windows Multiple Vulnerabilities (KB4503291)

This host is missing a critical security update according to Microsoft KB4503291 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4503293)

This host is missing a critical security update according to Microsoft KB4503293 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure

An out-of-bounds read in dnsvalidatednsresponse in dns.c was discovered in HAProxy through 1.8.14. Due to a missing check when validating DNS responses, remote attackers might be able read the 16 bytes corresponding to an AAAA record from the non-initialized part of the buffer, possibly accessing...

MGASA-2019-0189 Updated postgresql packages fix security vulnerabilities

Updated postgresql packages fix security vulnerabilities CVE-2019-10129: Memory disclosure in partition routing Prior to this release, a user running PostgreSQL 11 can read arbitrary bytes of server memory by executing a purpose-crafted INSERT statement to a partitioned table. CVE-2019-10130:...

Updated postgresql packages fix security vulnerabilities

Updated postgresql packages fix security vulnerabilities CVE-2019-10129: Memory disclosure in partition routing Prior to this release, a user running PostgreSQL 11 can read arbitrary bytes of server memory by executing a purpose-crafted INSERT statement to a partitioned table. CVE-2019-10130:...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2019-1500)

This update for java-170-openjdk fixes the following issues : Update to 2.6.18 - OpenJDK 7u221 April 2019 CPU Security issues fixed : - CVE-2019-2602: Fixed flaw inside BigDecimal implementation Component: Libraries bsc1132728. - CVE-2019-2684: Fixed flaw inside the RMI registry implementation...

Security update for java-1_7_0-openjdk (moderate)

openSUSE Security Update: Security update for java-170-openjdk Announcement ID: openSUSE-SU-2019:1500-1 Rating: moderate References: 1122293 1122299 1132728 1132729 1132732 1134297 Cross-References: CVE-2018-11212 CVE-2019-2422 CVE-2019-2426 CVE-2019-2602 CVE-2019-2684 CVE-2019-2698 Affected...

SUSE-SU-2019:1392-1 Security update for java-1_7_0-openjdk

This update for java-170-openjdk fixes the following issues: Update to 2.6.18 - OpenJDK 7u221 April 2019 CPU Security issues fixed: - CVE-2019-2602: Fixed flaw inside BigDecimal implementation Component: Libraries bsc1132728. - CVE-2019-2684: Fixed flaw inside the RMI registry implementation...

macOS : Apple Safari < 12.1.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.1.1 It is, therefore, affected by multiple vulnerabilities. - Multiple out-of-bound errors exist in WebKit, due to improper memory handling. An unauthenticated, remote attacker can exploit this, via speciall...

About the security content of iTunes for Windows 12.9.5

About the security content of iTunes for Windows 12.9.5 This document describes the security content of iTunes for Windows 12.9.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...

SUSE-SU-2019:1321-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: Security issues fixed: - CVE-2016-9189: Fixed a integer overflows leading to memory disclosure in PyImagingMapBuffer bsc1008845. - CVE-2016-9190: Fixed a code execution vulnerability using a crafted image file in ImagingNew bsc1008846. -...

Nginx 1.x < 1.14.1 Multiple Vulnerabilties

According to its Server response header, the installed version of nginx is 1.x prior to 1.14.1 or 1.15.x prior to 1.15.6. It is, therefore, affected by the following issues : - An unspecified error exists related to the module 'ngxhttpv2module' that allows excessive memory usage. CVE-2018-16843 -...

UBUNTU-CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...