1549 matches found
[SECURITY] [DLA 474-1] dosfstools security update
Package : dosfstools Version : 3.0.13-1+deb7u1 CVE IDs : CVE-2015-8872 CVE-2016-4804 It was discovered that there was an invalid memory and heap overflow vulnerability in dosfstools, a collection of utilities for making and checking MS-DOS FAT filesystems. For Debian 7 "Wheezy", this issue has be...
DLA-474-1 dosfstools - security update
Bulletin has no description...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or obtain confidential information.
The vulnerability in the fxcodec/codec/fxCodecJpj.cpp function of the Google Chrome browser’s PDFium component is related to the incorrect implementation of the sycc420toRGB and sycc422toRGB functions. Exploiting this vulnerability can allow an attacker to obtain confidential information or cause...
The vulnerability of the FreeBSD operating system, which allows a hacker to trigger a service failure
The vulnerability of the amd64setldt function sys/amd64/amd64/sysmachdep.c in the FreeBSD operating system is caused by an overflow in the dynamic memory buffer. Exploiting this vulnerability can allow a local attacker to trigger a system failure kernel crash through the system call i386setldt...
The vulnerability of the optimization software for PNG OptiPNG allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the bmpreadrows function in the PNG OptiPNG optimization software is caused by buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure memory out-of-bound reading, unexpected system termination, or execute arbitrar...
The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure
The vulnerability of the putcontig8bitCIELab function in the LibTIFF library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure memory overflow during reading by using a compressed TIFF image...
The vulnerability of the free implementation of the DHCP client dhcpcd allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the free implementation of the DHCP client dhcpcd arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a corrupted DHCP response...
The vulnerability of the set of libraries for Network Security Services allows a perpetrator to execute arbitrary code.
The vulnerability of the Network Security Services library is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted ASN.1 data within X.509 certificates...
The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime allow attackers to execute arbitrary code.
The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by an overflow in the dynamic memory buffer. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...
The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to cause a service failure.
The vulnerability of the libstagefright library in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, is due to buffer overflows. Exploiting this vulnerability allows a malicious actor to cause a service failure memory consumption by using an MPEG-4 file that initiates the...
The vulnerability of the Flash Player and Adobe Integrated Runtime software allows a perpetrator to execute arbitrary code.
The vulnerabilities of the Flash Player and Adobe Integrated Runtime programs are caused by an overflow in the dynamic memory buffer. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code using a specially created XML object during a call to the toString method...
Mozilla Firefox Denial of Service Vulnerability (CNVD-2015-08319)
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in the HTTP/2 implementation of Mozilla Firefox prior to version 43.0. A remote attacker can exploit this vulnerability to cause a denial of service integer...
Adobe Flash Player Heap Memory Buffer Overflow Vulnerability (CNVD-2015-08231)
Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A heap buffer overflow vulnerability exists in Adobe Flash Player's handling of specia...
libxml2: multiple issues
CVE-2015-1819 denial of service A denial of service flaw was found in the way the libxml2 library parsed certain XML files. An attacker could provide a specially crafted XML file that, when parsed by an application using libxml2, could cause that application to use an excessive amount of memory...
Security Advisory - Memory Overflow Vulnerability in the Huawei Smartphone
There has a memory overflow vulnerability in Some Huawei mobile phone products. An attacker may exploit this vulnerability to gain the root access over the mobile phones. Then the attacker can further modify memory data and obtain sensitive information. Vulnerability ID: HWPSIRT-2015-10046 This...
Huawei Mate7 HIFI驱动程序内存堆溢出漏洞
No description provided by source...
Python 2.7 - strop.replace() Method Integer Overflow
Python 2.7 - strop.replace Method Integer Overflow Title: Python 2.7 strop.replace Integer Overflow Credit: John Leitch [email protected] Url1: http://autosectools.com/Page/Python-strop-replace-Integer-Overflow Url2: http://bugs.python.org/issue24708 Resolution: Fixed The Python 2.7...
Foxit Reader < 7.2 Multiple Vulnerabilities
The version of Foxit Reader installed on the remote Windows host is prior to 7.2. It is, therefore, affected by multiple vulnerabilities : - A memory overflow condition exists in the PDF creator plugin ConvertToPDFx86.dll when converting a PNG file to a PDF file due to an error that occurs when...
Foxit PhantomPDF < 7.2 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is affected by multiple vulnerabilities : - A memory overflow condition exists in the PDF creator plugin ConvertToPDFx86.dll when converting a PNG file to a PDF file due to an...
Network Time Protocol Reference Clock Memory Corruption Vulnerability
Talos Vulnerability Report TALOS-2015-0064 Network Time Protocol Reference Clock Memory Corruption Vulnerability October 21, 2015 CVE Number CVE-2015-7853 Description A potential buffer overflow vulnerability exists in the refclock of ntpd. An invalid length provided by a hardware reference clock...