1435 matches found
Marvell Avastar wireless SoCs have multiple vulnerabilities
Overview Some Marvell Avastar wireless system on chip SoC models have multiple vulnerabilities, including a block pool overflow during Wi-Fi network scan. Description A presentation at the ZeroNights 2018 conference describes multiple security issues with Marvell Avastar SoCs models 88W8787,...
The vulnerability of the Win32k component in Windows operating systems allows attackers to enhance their privileges and execute arbitrary code.
The vulnerability of the Win32k.sys component in Windows operating systems arises due to an overflow in memory buffers. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...
CVE-2019-6983
The CVE-2019-6983 issue affects Foxit 3D Plugin Beta in Foxit Reader/PhantomPDF prior to 9.4.0.16807. The vulnerability is an Integer Overflow in the 3D content handling path that can cause a crash via freeing memory in certain crafted PDF files containing 3D content. No exploit details are provi...
The vulnerability of Siemens Sinumerik CNC microprogramming software, related to overflow in dynamic memory, allows a intruder to execute arbitrary code.
The vulnerability of Siemens Sinumerik CNC microprogramming software is related to overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileged privileges by sending specially crafted packets via port 4842/TCP...
Tron Foundation: DOS attack by consuming all CPU and using all available memory
Summary: A single request to submit a post to /wallet/deploycontract with several megabytes of bytecode along with CPU intensive long parsing will consume CPU for about 10 minutes while still holding several megabytes of bytecode in heap. With enough requests lets say 1K-10K depending upon...
VBScript - VbsErase Reference Leak Use-After-Free
VBScript - VbsErase Reference Leak Use-After-Free There is an reference leak in Microsoft VBScript that can be turned into an use-after-free given sufficient time. The vulnerability has been confirmed in Internet Explorer on various Windows versions with the latest patches applied. Details:...
The vulnerability of the `pack` function in the Perl interpreter allows attackers to cause service failures, gain access to confidential data, or compromise its integrity.
The vulnerability of the pack function in the Perl interpreter is related to an error that causes overflow in the dynamic memory when writing data to it during operations involving a large number of elements within the pack function. Exploiting this vulnerability allows a remote attacker to execu...
Mozilla Firefox and Firefox ESR integer overflow vulnerability (CNVD-2018-25865)
Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox version 63 and Firefox ESR version 60.3. An...
The vulnerability of Qualcomm Biometrics’ component in the Android operating system allows a perpetrator to execute arbitrary code.
The vulnerability of Qualcomm Biometrics’ component in the Android operating system is caused by an overflow in the memory buffer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers allows attackers to increase their privileges.
The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...
Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack
UPDATE Two zero-day vulnerabilities in Bluetooth Low-Energy chips made by Texas Instruments and used in millions of wireless access points open corporate networks to crippling stealth attacks. Adversaries can exploit the bugs by simply being approximately 100 to 300 feet from the vulnerable...
glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper
A buffer overflow has been discovered in the GNU C Library aka glibc or libc6 in the mempcpyavx512novzeroupper function when particular conditions are met. An attacker could use this vulnerability to cause a denial of service or potentially execute code...
Just Answering A Video Call Could Compromise Your WhatsApp Account
What if just receiving a video call on WhatsApp could hack your smartphone? This sounds filmy, but Google Project Zero security researcher Natalie Silvanovich found a critical vulnerability in WhatsApp messenger that could have allowed hackers to remotely take full control of your WhatsApp just b...
CVE-2018-17942
The converttodecimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing...
CVE-2018-17076
The CVE-2018-17076 issue affects GPP up to version 2.25. The root cause is that processing a crafted file can cause excessive stack usage, leading to a segmentation fault or potentially other impact. The available documents confirm the vulnerability and its memory-related stack overflow behavior,...
The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.
The vulnerability of JavaScript script handlers in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...
Microsoft Edge browser’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...
The vulnerability of the WebAssembly component in Mozilla Firefox’s browser allows a hacker to trigger a service failure.
The vulnerability of the WebAssembly component in Mozilla Firefox arises due to an overflow in memory buffers. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Qualcomm GERAN component of the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the GERAN component GSM EDGE Radio Access Network of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibili...
