Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06749)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat. An attacker is allowed to construct a malicious PDF file and trick the user into parsing it, which can obtain sensitive memory information...

Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06747)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat. An attacker is allowed to construct a malicious PDF file and trick the user into parsing it, which can obtain sensitive memory information...

Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06751)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat. An attacker is allowed to construct a malicious PDF file and trick the user into parsing it, which can obtain sensitive memory information...

Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06752)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat. An attacker is allowed to construct a malicious PDF file and trick the user into parsing it, which can obtain sensitive memory information...

Adobe Acrobat/Reader Memory Disclosure Vulnerability (CNVD-2015-06748)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory disclosure vulnerability exists in Adobe Reader/Acrobat. An attacker is allowed to construct a malicious PDF file and trick the user into parsing it, which can obtain sensitive memory information...

CVE-2015-6700

Summary: CVE-2015-6700 affects Adobe Reader and Acrobat (Windows and macOS) versions prior to: 10.1.16, 11.0.13, 2015.006.30094 (DC Classic), and 2015.009.20069 (DC Continuous). The vulnerability arises in the setBackground function when processing invalid arguments, enabling an attacker to obtai...

CVE-2015-6699

CVE-2015-6699 affects Adobe Reader/Acrobat on Windows and OS X: 10.x before 10.1.16, 11.x before 11.0.13, DC Classic before 2015.006.30094, and DC Continuous before 2015.009.20069. The addForegroundSprite function can reveal sensitive information from process memory via invalid arguments (informa...

CVE-2015-5864

CVE-2015-5864 : IOAudioFamily in Apple OS X before 10.11 allows a local attacker to obtain sensitive kernel memory-layout information via unspecified vectors. The vulnerability results in disclosure of kernel memory content. Public references indicate Apple fixed this issue by permuting kernel po...

Oracle: Security Advisory (ELSA-2007-0993)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2014-9750

ntpcrypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service daemon crash via a packet containing an extension field with an invalid value for the length of its value...

The vulnerability of the Firefox browser allows a perpetrator to gain access to protected information from the process’ memory.

The vulnerability of the TCP Socket API implementation in Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to protected information from the process’s memory by reading data in network packets due to...

Apple OS X SMBClient Memory Disclosure Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X SMBClient has a problem that allows local users to exploit a vulnerability to access the contents of kernel memory...

Adobe Flash Player Memory Leakage Vulnerability

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A memory disclosure vulnerability exists in Adobe Flash Player, which allows attackers...

Mozilla Firefox TCP Socket API Implementation Information Disclosure Vulnerability

Mozilla Firefox is an open source web browser. The Mozilla Firefox TCP Socket API implementation fails to properly handle array boundaries, allowing remote attackers to exploit a vulnerability by reading packet data to obtain sensitive information in process memory...

UBUNTU-CVE-2015-5576

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 do not properly restrict discovery of memory addresses, which allows...

UBUNTU-CVE-2015-4512

gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use the Cairo library with 32-bit color-depth surface creation followed by 16-bit color-depth surface display, which allows remote attackers to obtain sensitive information from process memory or cause a...

Apple iOS IOStorageFamily Memory Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory initialization vulnerability in Apple iOS IOStorageFamily allows local malicious attackers to exploit the vulnerability to read kernel memory information...

Apple iOS Sensitive Memory Information Disclosure Vulnerability (CNVD-2015-06090)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows malicious attackers to exploit the vulnerability to obtain kernel memory information...

Windows ATMFD.DLL CharString Stream Out-of-Bounds Reads

Source: https://code.google.com/p/google-security-research/issues/detail?id=382&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: --- DRIVERPAGEFAULTBEYONDENDOFALLOCATION d6 N bytes of memory was...

kernel: ASLR bruteforce possible for vdso library

An information leak flaw was found in the way the Linux kernel's Virtual Dynamic Shared Object vDSO implementation performed address randomization. A local, unprivileged user could use this flaw to leak kernel memory addresses to user-space...