The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to memory-related errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to memory handling errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to memory handling errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...

Information disclosure

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to obtain sensitive information from process memory via unspecified vectors...

CVE-2015-3058

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to obtain sensitive information from process memory via unspecified vectors...

D-Link cloud routing memory vulnerability: hack 1 minute break or leakage of online banking passwords-vulnerability warning-the black bar safety net

D-Link cloud routing memory the vulnerability may leak password Relates to 1 of 7 models; the Friends of the news group in English official website released four of the model number Router the patch, but there is no Chinese version of the Beijing news news recently, the domestic security experts...

Apple iOS Memory Out-of-Bounds Access Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory out-of-bounds access vulnerability exists in the Apple iOS kernel, allowing malicious applications to read kernel memory or crash the system...

CVE-2015-0777

CVE-2015-0777 affects Linux Xen patches (linux-2.6.18-xen-3.4.0) used on Linux kernels 2.6.x/3.x. The vulnerability lets a guest OS read from uninitialized host kernel memory via unspecified vectors. Connected advisories note an incomplete fix for this CVE; remediation requires applying updated k...

CVE-2015-2157

The 1 ssh2loaduserkey and 2 ssh2saveuserkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory...

jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001)

An unrestricted stack memory use flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Design/Logic Flaw

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly initialize function buffers, which allows local users to obtain...

Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: It was discovered that the PHP opcache component incorrectly handled memory. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2015-1351. It was...

[SECURITY] [DSA 3173-1] libgtk2-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3173-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3163-1] libreoffice security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3163-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3163-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3163-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 19, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3163-1 (libreoffice - security update)

It was discovered that LibreOffice, an office productivity suite, could try to write to invalid memory areas when importing malformed RTF files. This could allow remote attackers to cause a denial of service crash or arbitrary code execution via crafted RTF files. OpenVAS Vulnerability Test $Id:...

Amazon Linux AMI : php55 (ALAS-2015-474)

sapi/cgi/cgimain.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a character and lacks a newline character, whi...

Google Chrome for Android Memory Misreference Vulnerability

Google Chrome for Android is an Android-based browser. Google Chrome for Android handles DOM with a use-after-release vulnerability that allows attackers to construct malicious WEB pages and trick users into parsing them, which can crash the application or execute code...

Adobe Flash Player Double Free (APSB15-03: CVE-2015-0312)

A double free memory vulnerability has been reported in Adobe Flash Player. The issue occurs while sharing a bytearray between two workers. If one worker calls bytearray.compress while the other uses that bytearray, the code does not handle the race correctly and leads to double free, which can...

USN-2483-1: JasPer vulnerabilities

Jose Duart discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. CVE-2014-8137 Jos...