9671 matches found
PHP 5.4.x < 5.4.45 / 5.5.x < 5.5.29 / 5.6.x < 5.6.13 Multiple Vulnerabilities
Binary data 8861.prm...
Enabling QR codes in Internet Explorer, or a story of a cross-platform memory disclosure
Posted by Mateusz Jurczyk of Google Project Zero In the previous series of posts parts 1 2 3 4, we discussed the exploitation process of a serious “blend” vulnerability CVE-2015-0093 / CVE-2015-3052, which was special in that it provided the attacker with an extremely powerful primitive arbitrary...
Amazon Linux: Security Advisory (ALAS-2013-166)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2015-5697
The getbitmapfile function in drivers/md/md.c in the Linux kernel before 4.1.6 does not initialize a certain bitmap data structure, which allows local users to obtain sensitive information from kernel memory via a GETBITMAPFILE ioctl call...
Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table Exploit
Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=386&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: ---...
Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table Exploit
Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=392&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: ---...
Microsoft Windows - ATMFD.DLL Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
Microsoft Windows - ATMFD.DLL Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table Source: https://code.google.com/p/google-security-research/issues/detail?id=392&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupt...
Microsoft Windows - ATMFD.DLL Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table
Microsoft Windows - ATMFD.DLL Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table Source: https://code.google.com/p/google-security-research/issues/detail?id=386&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OT...
Microsoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=392&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: --- DRIVERPAGEFAULTINFREEDSPECIALPOOL d5 Memory was referenced after it...
Microsoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=386&can=1 We have encountered a number of Windows kernel crashes in the ATMFD.DLL OpenType driver while processing corrupted OTF font files, such as: --- DRIVERPAGEFAULTINFREEDSPECIALPOOL d5 Memory was referenced after it...
Apple iOS and OS X Information Disclosure Vulnerability
Apple iOS and OS X are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; OS X is developed for Mac computers. A security vulnerability exists in the Kernel of Apple iOS prior to version 8.4.1 and OS X prior to version 10.10.5, which stems from the program failing t...
Apple iOS ImageIO Memory Information Disclosure Vulnerability (CNVD-2015-05585)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory incorrect initialization vulnerability exists in Apple iOS ImageIO's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct special files that can be parse...
Apple OS X Bluetooth Kernel Memory Layout Disclosure Vulnerability
Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability in the Apple OS X Bluetooth module allows attackers to exploit the vulnerability to obtain kernel memory information...
Apple iOS ImageIO Memory Information Disclosure Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory incorrect initialization vulnerability exists in Apple iOS ImageIO's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct special files that can be parse...
PHP Regular Expression Uninitialized Pointer Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of PHP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of invalid regular expressions. The issue lies in the failure to properly initialize...
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 OS X Yosemite v10.10.5 and Security Update 2015-006 is now available and addresses the following: apache Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.4 Impact: Multiple vulnerabilities existed in...
CVE-2015-5782
CVE-2015-5782 concerns ImageIO in Apple iOS prior to 8.4.1 and OS X prior to 10.10.5. The root cause is an uninitialized (unspecified) data structure in TIFF handling, which permits remote attackers to disclose sensitive information from a process’s memory by supplying a crafted TIFF image. The d...
UBUNTU-CVE-2015-2059
The stringpreputf8toucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read...
Linux MD Driver Initialization Memory Disclosure Vulnerability
Linux kernel is an open source operating system. A security vulnerability exists in Linux kernel, which can be exploited by a local attacker to obtain 4095 bytes of information in kernel memory when a bitmap file requests a device via getbitmapfile but bitmap is disabled and the system fails to...