Heap overflow

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This...

CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This...

CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This...

The vulnerability of the Android operating system from the CAF repository, related to integer overflow, allows an attacker to trigger a memory buffer overflow.

The vulnerability of the Android operating system from the CAF repository is related to a numerical overflow issue. Exploiting this vulnerability allows an attacker to trigger a memory buffer overflow...

Rockwell Automation FactoryTalk Activation Manager (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Rockwell Automation Equipment : Factory Talk Activation Manager Vulnerabilities : Cross-site Scripting, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE...

CVE-2017-17142: Improper Restriction of Operations within the Bounds of a Memory Buffer

SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100;...

Vulnerability of Adobe software for viewing and editing PDF files, caused by an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe’s software for viewing and editing PDF files arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause memory corruption and execute arbitrary code remotely...

The vulnerability in the JavaScript V8 engine of Google Chrome’s browser allows a hacker to gain access to memory areas.

The vulnerability in the JavaScript V8 engine of Google Chrome browsers arises from performing operations beyond the bounds of memory buffers reading beyond the memory boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to memory areas through a specially crafted...

The vulnerability of the DNS server Dnsmasq, caused by overflow in the dynamic memory buffer, allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the DNS server Dnsmasq arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures or execute arbitrary code using a specially crafted IPv6 request...

CVE-2014-9981: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient during boot...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code in the context of the current user

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code in the context of the current user

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of the FlexNet Publisher software management tool allows a perpetrator to execute arbitrary code.

The vulnerability of the FlexNet Publisher license management software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with system privileges...

CVE-2017-9920: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."...

CVE-2017-10754: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at...

PT-2017-2374

Name of the Vulnerable Software and Affected Versions Adobe Shockwave versions 12.2.8.198 and earlier Description The issue is caused by a memory buffer overflow operation, which can lead to arbitrary code execution if successfully exploited. This could allow a remote attacker to execute arbitrar...

The vulnerability of the Multi-Touch component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Multi-Touch component in the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory...

The vulnerability in the JavaScript script of Internet Explorer and Microsoft Edge browsers allows attackers to induce a service failure.

The vulnerability of the JavaScript script in Internet Explorer and Microsoft Edge browsers arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the iOS operating system and the Mac OS X operating system allows a perpetrator to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the iOS operating system and the Mac OS X operating system arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a...