UBUNTU-CVE-2018-5095

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, a...

Vulnerability of the JavaScript ChakraCore kernel and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights

The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

The vulnerability of the Thermal Driver temperature sensor driver in the Android operating system allows a hacker to gain increased privileges.

The vulnerability of the Thermal Driver temperature sensor driver in the Android operating system is related to memory buffer overflow and lack of access control mechanisms. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

MGASA-2018-0053 Updated curl packages fix security vulnerability

If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar. The issue pertains to the function that loads cookies into memory, which reads the specified file...

CVE-2017-14385

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...

CVE-2017-14385

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...

Design/Logic Flaw

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...

CVE-2017-14385

The CVE affects EMC Data Domain DD OS and EMC Data Domain Virtual Edition. A memory overflow vulnerability in SMBv1 exists in DD OS across multiple families, including 5.7 (<5.7.5.6), 6.0 (<6.0.2.9), 6.1 (<6.1.0.21), and all VE versions (2.0, 3.0 <3.0 SP2 Update 1, 3.1

CVE-2017-14385

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...

EMC Data Domain DD OS Memory Overflow Vulnerability

EMC Data Domain DD OS and EMC Data Domain Virtual Edition are both products of EMC Corporation.EMC Data Domain DD OS is a deduplication operating system.EMC Data Domain Virtual Edition is a deduplication storage device. A memory overflow vulnerability exists in EMC Data Domain DD OS and EMC Data...

Google Android IntentFilter suffers from a deserialization memory overflow vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Consortium. Google Android IntentFilter has a deserialization memory overflow vulnerability. The vulnerability is that the Android system service ActivityManagerService has an...

[SECURITY] [DLA 1188-1] libxml2 security update

Package : libxml2 Version : 2.8.0+dfsg1-7+wheezy10 CVE ID : CVE-2017-5130 Pranjal Jumde @pjumde reported an heap overflow in memory debug code of libxml2. For Debian 7 "Wheezy", these problems have been fixed in version 2.8.0+dfsg1-7+wheezy10. We recommend that you upgrade your libxml2 packages...

The vulnerability of the `glob` function in the `glob.c` library, which handles system calls and core system functions of `glibc`, allows attackers to cause an unexpected termination of the application.

The vulnerability of the glob function in the glob.c library, which handles system calls and core system functions, arises due to buffer overflows in dynamic memory during the processing of home directories. Exploiting this vulnerability can allow a remote attacker to cause an application to...

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

The vulnerability of the DNS server Dnsmasq, related to buffer overflows, allows attackers to cause a service failure or execute arbitrary code.

The vulnerability of the Dnsmasq DNS server arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code by sending specially crafted DNS packets...

Microsoft Office Word free macro command execution flaw vulnerability 0day-vulnerability warning-the black bar safety net

If we inform you that in MS-Word on the presence of a Royal Decree to fulfill the vulnerability flaws of the bug, which unnecessary any macro maybe memory overflow? Windows for use between the stop data transfer supply a variety of transmission methods, this one is called static swap agreements, ...

PT-2017-3151 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: The issue is related to the cdc parse cdc header function in drivers/usb/core/message.c, which allows local users to cause a denial of service, including out-of-bounds read and system crash, ...

The vulnerability of the Android operating system’s IOCTL handler from the SAF repository, which allows a attacker to trigger a numerical overflow and write beyond the memory boundaries.

The vulnerability of the Android operating system’s IOCTL handler from the CAF repository arises due to synchronization errors when using a shared resource during a race condition. Exploiting this vulnerability can allow an attacker to trigger a full memory overflow and write beyond the memory...

The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to cause a service failure.

The vulnerability in all components of the Qualcomm Android operating system, from the CAF repository that uses Linux kernel, is caused by an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

Gh0st Client Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'zlib' class MetasploitModule 'Gh0st Client buffer Overflow', 'Description' = %q This module exploits a Memory buffer overflow in the Gh0st client C2 server ,...